CVE-2024-7138 - Vulnerability Details - OpenCVE

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://community.silabs.com/068Vm00000I5mjD

History

Tue, 15 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.0002}`	epss `{'score': 0.00022}`

Wed, 28 May 2025 14:30:00 +0000

Type	Values Removed	Values Added
References	https://community.silabs.com/068Vm00000F9zre

Wed, 28 May 2025 13:45:00 +0000

Type	Values Removed	Values Added
References		https://community.silabs.com/068Vm00000I5mjD

Tue, 24 Dec 2024 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 19 Dec 2024 19:30:00 +0000

Type	Values Removed	Values Added
Description		An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device.
Title		Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Weaknesses		CWE-617
References		https://community.silabs.com/068Vm00000F9zre
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Silabs

Published: 2024-12-19T19:23:29.061Z

Updated: 2025-05-28T13:19:54.167Z

Reserved: 2024-07-26T18:12:35.473Z

Link: CVE-2024-7138

Vulnrichment

Updated: 2024-12-24T16:41:57.819Z

NVD

Status : Awaiting Analysis

Published: 2024-12-19T20:15:07.947

Modified: 2025-05-28T14:15:32.080

Link: CVE-2024-7138

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7138", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "state": "PUBLISHED", "assignerShortName": "Silabs", "dateReserved": "2024-07-26T18:12:35.473Z", "datePublished": "2024-12-19T19:23:29.061Z", "dateUpdated": "2025-05-28T13:19:54.167Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "WiSeConnect SDK", "product": "RS9116 Bluetooth SDK", "repo": "https://github.com/SiliconLabs/wiseconnect-wifi-bt-sdk", "vendor": "silabs.com", "versions": [{"lessThanOrEqual": "2.10.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device. "}], "value": "An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device."}], "impacts": [{"capecId": "CAPEC-25", "descriptions": [{"lang": "en", "value": "CAPEC-25 Forced Deadlock"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-617", "description": "CWE-617 Reachable Assertion", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2025-05-28T13:19:54.167Z"}, "references": [{"tags": ["vendor-advisory", "permissions-required"], "url": "https://community.silabs.com/068Vm00000I5mjD"}], "source": {"discovery": "UNKNOWN"}, "title": "Denial of Service in Silicon Labs RS9116 Bluetooth SDK", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-24T16:41:27.979333Z", "id": "CVE-2024-7138", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-24T16:42:02.844Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7138", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-24T16:41:27.979333Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-24T16:41:57.819Z"}}], "cna": {"title": "Denial of Service in Silicon Labs RS9116 Bluetooth SDK", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-25", "descriptions": [{"lang": "en", "value": "CAPEC-25 Forced Deadlock"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/SiliconLabs/wiseconnect-wifi-bt-sdk", "vendor": "silabs.com", "product": "RS9116 Bluetooth SDK", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.10.4"}], "packageName": "WiSeConnect SDK", "defaultStatus": "unaffected"}], "references": [{"url": "https://community.silabs.com/068Vm00000I5mjD", "tags": ["vendor-advisory", "permissions-required"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device.", "supportingMedia": [{"type": "text/html", "value": "An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device. ", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-617", "description": "CWE-617 Reachable Assertion"}]}], "providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2025-05-28T13:19:54.167Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7138", "state": "PUBLISHED", "dateUpdated": "2025-05-28T13:19:54.167Z", "dateReserved": "2024-07-26T18:12:35.473Z", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "datePublished": "2024-12-19T19:23:29.061Z", "assignerShortName": "Silabs"}, "dataVersion": "5.1"}