CVE-2023-6874: falha de alta gravidade em silabs.com GSDK
Zigbee Unauthenticated DoS via NWK Sequence number manipulation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.4%
Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
silabs.com · GSDKCVEs relacionadas — silabs.com GSDK
No mesmo produto, das mais perigosas para as menos.
CVE-2023-6387HIGHIncorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflowEPSS 0.6%CVE-2023-4020CRITICALUnvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memoryEPSS 0.6%CVE-2023-4280CRITICALUnvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory regionEPSS 0.4%CVE-2024-22473MEDIUMUninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devicesEPSS 0.4%CVE-2024-0240MEDIUMSilicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clientsEPSS 0.4%CVE-2023-0775MEDIUMBluetooth LE Invalid prepare write request command leads to denial of serviceEPSS 0.3%