Skip to content
OpenAdvisories

Product · silabs.com

Ember ZNet SDK

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-51393

    Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer

    Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault…

    silabs.com Ember ZNet SDK
  • Medium 5.3
    CVE-2023-51394

    Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash

    High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash.

    silabs.com Ember ZNet SDK
  • Medium 6.2
    CVE-2023-51392

    Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

    Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.

    silabs.com Ember ZNet SDK
  • Medium 6.8
    CVE-2023-41096

    Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices

    Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.…

    silabs.com Ember ZNet SDK