Read the docs

silabs.com

Records179All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high82CVSS 7.0–8.9

Exploited now

silabs.com records in CISA KEV

No silabs.com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gecko Software Development Kit 30 records HIGH Emberznet 22 records MEDIUM Z-wave Software Development Kit 8 records MEDIUM Gecko Os 6 records MEDIUM Z/ip Gateway Sdk 5 records MEDIUM 500 Series Firmware 4 records LOW Bluetooth Low Energy Software Development Kit 4 records MEDIUM Gecko Bootloader 3 records HIGH

Records

5 records in Z/ip Gateway Sdk · all components

TI-2023-00923 CVE-2023-0972 · GHSA-h9x5-2vrm-ww3f

Buffer overflow in S0 Decryption on Z/IP Gatweay

Priority MEDIUM 43

Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00387 Published 2023-06-21 Fixed in 7.18.03 CWE-125
TI-2023-00922 CVE-2023-0971 · GHSA-25x7-989g-366h

Command Authentication Bypass in Z/IP Gateway

Priority MEDIUM 42

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.0025 Published 2023-06-21 Fixed in 7.18.03 CWE-268
TI-2023-00921 CVE-2023-0970 · GHSA-8c88-9jmc-phqr

Serial API Buffer Overflow in Z/IP Gateway

Priority LOW 33

Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially exe…

CVSS 3.1HIGH 7.1 Physical No auth No interaction EPSS 0.00271 Published 2023-06-21 Fixed in 7.18.03 CWE-125
TI-2023-00920 CVE-2023-0969 · GHSA-gmvw-h9hf-3rxv

Global read overflow in Z/IP Gateway

Priority LOW 16

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00253 Published 2023-06-21 Fixed in 7.18.03 CWE-125
Open these records in search →