The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd().
Search vulnerabilities
CVE-2020-27892
CVSS 3.1 · 7.5 High
EPSS 1.5%
KEV · Not listed
Vendors
Products
CVE-2020-27891
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal().
CVSS 3.1 · 7.5 High
EPSS 1.5%
KEV · Not listed
Vendors
Products
CVE-2020-27890
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute's value.
CVSS 3.1 · 8.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.