Vulnerabilidades em Silicon Labs

65 resultados
Análise Vexday

O portfólio de vulnerabilidades da Silicon Labs soma 50 CVEs catalogadas, das quais 11 são classificadas como críticas, e 14 surgiram nos últimos 90 dias — indicando um ritmo recente de descobertas que merece acompanhamento contínuo. A taxa de exploração ativa é de 0,0%, abaixo da média geral do catálogo CISA KEV, e nenhuma PoC pública está disponível, o que reduz o risco imediato de exploração em larga escala. A falha mais prevalente é do tipo CWE-125 (leitura fora dos limites de buffer), padrão frequentemente associado a dispositivos embarcados e firmware, segmento central dos produtos da empresa. A CVE mais perigosa em evidência atualmente é CVE-2023-27882, com escore EPSS de 0,0178, sugerindo probabilidade de exploração ainda baixa, mas que deve ser monitorada dado o peso da criticidade geral do portfólio.

CVE-2024-23937MEDIUMSilicon Labs Gecko OS Debug Interface Format StringEPSS 0.4%CVE-2023-0972CRITICALBuffer overflow in S0 Decryption on Z/IP GatweayEPSS 0.4%CVE-2026-47151HIGHDoor Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47150HIGHIAS Zone enroll invalid table index and write in EmberZNet 9.0.2EPSS 0.4%CVE-2023-51395HIGHZ-Wave S0 Decryption Vulnerability in End DevicesEPSS 0.3%CVE-2026-66282MEDIUMAuthenticated Denial-of-Service in Zigbee Publish Billing PeriodEPSS 0.3%CVE-2026-66281MEDIUMAuthenticated Denial-of-Service in Zigbee Discover Attributes HandlingEPSS 0.3%CVE-2020-9058—Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 EPSS 0.3%CVE-2023-0970HIGHSerial API Buffer Overflow in Z/IP GatewayEPSS 0.3%CVE-2026-89409MEDIUMUnvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​EPSS 0.3%CVE-2025-2838MEDIUMSilicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service VulnerabilityEPSS 0.3%CVE-2023-0969LOWGlobal read overflow in Z/IP GatewayEPSS 0.3%CVE-2026-17610MEDIUMRAIL 802.15.4 Mux missing ACK can lead to DoSEPSS 0.3%CVE-2026-2815HIGHIncorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keysEPSS 0.3%CVE-2023-0971CRITICALCommand Authentication Bypass in Z/IP GatewayEPSS 0.3%CVE-2026-66279HIGHDis-connect vulnerability in Connect StackEPSS 0.2%CVE-2026-15419HIGHCP210x Driver Memory Corruption results in Arbitrary Code ExecutionEPSS 0.2%CVE-2026-107359HIGHMalformed Wi-Fi Beacon Causes Crash on WF200EPSS 0.2%CVE-2026-15418LOWCP210x Memory LeakageEPSS 0.2%CVE-2024-12975LOWSilicon Labs CPC can leak information in full duplex SPIEPSS 0.2%