Vulnerabilities

TI-2023-28049 CVE-2023-51394 · GHSA-fc74-wgp6-2pv9

Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash

LOW 39

High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2024-02-23 Fixed in 7.4.0 CWE-476

TI-2023-28047 CVE-2023-51392 · GHSA-qfrv-fmc5-hmmh

Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

MEDIUM 42

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00244 Published 2024-02-23 Fixed in 7.4.0 CWE-1240

Vulnerabilities

Filters

Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash

Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM