CVE-2023-34596

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-34596
A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://aeotec.com/products/aeotec-wallmote-quad/%3B
https://github.com/iot-sec23/IoT-CVE/blob/main/Aeotec%20WallMote%20Switch%20Vulnerability%20Report.pdf Exploit Third Party Advisory
https://aeotec.com/products/aeotec-wallmote-quad/%3B
https://github.com/iot-sec23/IoT-CVE/blob/main/Aeotec%20WallMote%20Switch%20Vulnerability%20Report.pdf Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:aeotech:zw130-a_firmware:2.3:*:*:*:*:*:*:*
cpe:2.3:h:aeotech:zw130-a:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:07

Type Values Removed Values Added
References () https://aeotec.com/products/aeotec-wallmote-quad/%3B - () https://aeotec.com/products/aeotec-wallmote-quad/%3B -
References () https://github.com/iot-sec23/IoT-CVE/blob/main/Aeotec%20WallMote%20Switch%20Vulnerability%20Report.pdf - Exploit, Third Party Advisory () https://github.com/iot-sec23/IoT-CVE/blob/main/Aeotec%20WallMote%20Switch%20Vulnerability%20Report.pdf - Exploit, Third Party Advisory

07 Nov 2023, 04:15

Type Values Removed Values Added
References
  • {'url': 'https://aeotec.com/products/aeotec-wallmote-quad/;', 'name': 'https://aeotec.com/products/aeotec-wallmote-quad/;', 'tags': ['Product'], 'refsource': 'MISC'}
  • () https://aeotec.com/products/aeotec-wallmote-quad/%3B -

27 Jun 2023, 18:23

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Aeotech zw130-a Firmware
Aeotech
Aeotech zw130-a
CPE cpe:2.3:o:aeotech:zw130-a_firmware:2.3:*:*:*:*:*:*:*
cpe:2.3:h:aeotech:zw130-a:-:*:*:*:*:*:*:*
References (MISC) https://aeotec.com/products/aeotec-wallmote-quad/; - (MISC) https://aeotec.com/products/aeotec-wallmote-quad/; - Product
References (MISC) https://github.com/iot-sec23/IoT-CVE/blob/main/Aeotec%20WallMote%20Switch%20Vulnerability%20Report.pdf - (MISC) https://github.com/iot-sec23/IoT-CVE/blob/main/Aeotec%20WallMote%20Switch%20Vulnerability%20Report.pdf - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5

20 Jun 2023, 15:49

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-20 13:15

Updated : 2024-12-09 21:15

NVD link : CVE-2023-34596

Mitre link : CVE-2023-34596

CVE.ORG link : CVE-2023-34596

JSON object : View

Products Affected

aeotech

  • zw130-a
  • zw130-a_firmware
CWE
NVD-CWE-noinfo