CVE-2023-5310: medium-severity vulnerability in silabs.com Gecko SDK
Z-Wave Denial of Service caused by Stream of Packets
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.7epss 0.3%
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
silabs.com · Gecko SDKRelated CVEs — silabs.com Gecko SDK
In the same product, most dangerous first.
CVE-2023-51391HIGHMicrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerabilityEPSS 0.8%CVE-2025-14547LOWECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIsEPSS 0.3%CVE-2025-8414CRITICALZigbee Green Power Host Buffer Overflow VulnerabilityEPSS 0.3%CVE-2024-4013MEDIUMFailure to update BT Mesh Replay Protection ListEPSS 0.3%CVE-2023-2687LOWCVE-2023-2687EPSS 0.2%CVE-2025-12986MEDIUMDenial of Service Vulnerability in Silicon Labs WF200 and WGM160P DevicesEPSS 0.2%