Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: silabs.com Component: Z/ip Gateway Sdk Clear all filters
TI-2023-00923 CVE-2023-0972 · GHSA-h9x5-2vrm-ww3f

Buffer overflow in S0 Decryption on Z/IP Gatweay

Priority MEDIUM 43

Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00387 Published 2023-06-21 Fixed in 7.18.03 CWE-125
TI-2023-00922 CVE-2023-0971 · GHSA-25x7-989g-366h

Command Authentication Bypass in Z/IP Gateway

Priority MEDIUM 42

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.0025 Published 2023-06-21 Fixed in 7.18.03 CWE-268
TI-2023-00921 CVE-2023-0970 · GHSA-8c88-9jmc-phqr

Serial API Buffer Overflow in Z/IP Gateway

Priority LOW 33

Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially exe…

CVSS 3.1HIGH 7.1 Physical No auth No interaction EPSS 0.00271 Published 2023-06-21 Fixed in 7.18.03 CWE-125
TI-2023-00920 CVE-2023-0969 · GHSA-gmvw-h9hf-3rxv

Global read overflow in Z/IP Gateway

Priority LOW 16

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00253 Published 2023-06-21 Fixed in 7.18.03 CWE-125