CVE-2023-41096: medium-severity vulnerability in silabs.com Ember ZNet SDK
Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.1%
Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules)
allows potential modification or extraction of network credentials stored in flash.
This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
silabs.com · Ember ZNet SDKRelated CVEs — silabs.com Ember ZNet SDK
In the same product, most dangerous first.
CVE-2024-3043HIGHZigbee co-ordinator realignment packet may lead to denial of serviceEPSS 0.5%CVE-2023-51393MEDIUMPotential DoS due to BusFault and Assert in Ember ZNet legacy packet bufferEPSS 0.5%CVE-2023-51394MEDIUMPotential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crashEPSS 0.5%CVE-2024-10106LOWEmber ZNet buffer overflow in 'packet handoff' pluginEPSS 0.4%CVE-2023-51392MEDIUMSilicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCMEPSS 0.2%