CVE-2023-6387: falha de alta gravidade em silabs.com GSDK
Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.6%
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
silabs.com · GSDKCVEs relacionadas — silabs.com GSDK
No mesmo produto, das mais perigosas para as menos.
CVE-2023-4020CRITICALUnvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memoryEPSS 0.6%CVE-2023-4280CRITICALUnvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory regionEPSS 0.4%CVE-2024-22473MEDIUMUninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devicesEPSS 0.4%CVE-2024-0240MEDIUMSilicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clientsEPSS 0.4%CVE-2023-6874HIGHZigbee Unauthenticated DoS via NWK Sequence number manipulationEPSS 0.4%CVE-2023-0775MEDIUMBluetooth LE Invalid prepare write request command leads to denial of serviceEPSS 0.3%