Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: silabs.com Gecko Platform — community.silabs.com/sfc/servlet.shepherd/document/download… Clear all filters
TI-2023-15403 CVE-2023-32100 · GHSA-gcmp-2wvj-r4f4

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_se_driver_mac_compute in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2023-05-18 Fixed in 4.2.2 CWE-14
TI-2023-15402 CVE-2023-32099 · GHSA-8v3w-v77m-pg5c

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0053 Published 2023-05-18 Fixed in 4.2.2 CWE-14
TI-2023-15401 CVE-2023-32098 · GHSA-h3qp-9j63-3242

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0053 Published 2023-05-18 Fixed in 4.2.2 CWE-14
TI-2023-15400 CVE-2023-32097 · GHSA-47wf-487j-mcrr

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00481 Published 2023-05-18 Fixed in 4.2.2 CWE-14
TI-2023-15399 CVE-2023-32096 · GHSA-hg6g-xj6v-pfg7

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00481 Published 2023-05-18 Fixed in 4.2.2 CWE-14
TI-2023-02330 CVE-2023-2481 · GHSA-gq7p-9w26-9q74

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_se_opaque_import_key in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2023-05-18 Fixed in 4.2.2 CWE-14
TI-2023-01070 CVE-2023-1132 · GHSA-c5mm-qw5v-hxgq

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_se_driver_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2023-05-18 Fixed in 4.2.2 CWE-14
TI-2023-00916 CVE-2023-0965 · GHSA-g7hm-82x6-p838

Key duplication in GSDK

Priority LOW 33

Compiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00481 Published 2023-05-18 Fixed in 4.2.2 CWE-14