CVE-2020-27890

Published October 27th, 2020

View on NVD ↗

CVSS v3

8.2

HIGH

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute's value.

zigbeeprotocol/Z-Fuzzer

A fuzzing platform for Zigbee protocol implementations

GitHub