Ti Z-Stack vulnerabilities

4 CVEs affecting Ti Z-Stack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-16630, published 2021-09-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27892, published 2020-10-27. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands…
CVE-2020-27891, published 2020-10-27. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in…
CVE-2020-27890, published 2020-10-27. High severity, CVSS 8.2. EPSS: 1% chance of exploitation in the next 30 days. The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and…
CVE-2020-16630, published 2021-09-20. Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days. TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key…