CVE-2023-51393mediumCWE-770

CVE-2023-51393: fallo de gravedad media en silabs.com Ember ZNet SDK

Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Ember ZNet SDK

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.5%
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Productos afectados
silabs.com · Ember ZNet SDK
CVEs relacionadas — silabs.com Ember ZNet SDK

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-3043HIGHZigbee co-ordinator realignment packet may lead to denial of serviceEPSS 0.5%CVE-2023-51394MEDIUMPotential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crashEPSS 0.5%CVE-2024-10106LOWEmber ZNet buffer overflow in 'packet handoff' pluginEPSS 0.4%CVE-2023-51392MEDIUMSilicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCMEPSS 0.2%CVE-2023-41096MEDIUMKeys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devicesEPSS 0.1%