Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2023-51392

Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Emberznet
CVE-2023-51393

Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Emberznet Emberznet Sdk
CVE-2023-51394

Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash

High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Emberznet
CVE-2023-41096

Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Emberznet Sdk
CVE-2023-41094

Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Silabs
Products
Emberznet