zigbeeprotocol/Z-Fuzzer

zigbeeprotocol/Z-Fuzzer

Releases0

Stars10

A fuzzing platform for Zigbee protocol implementations

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-27890 ↗	Oct 27, 2020Tuesday, 27 October 2020, 21:15	8.2 HIGH	6.4 MEDIUM
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute's value.
CVE-2020-27891 ↗	Oct 27, 2020Tuesday, 27 October 2020, 21:15	7.5 HIGH	5 MEDIUM
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal().
CVE-2020-27892 ↗	Oct 27, 2020Tuesday, 27 October 2020, 21:15	7.5 HIGH	5 MEDIUM
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd().