Skip to content
OpenAdvisories
High · 8.8 CVE-2023-51395 EUVD-2023-56116GHSA-cfjm-h64g-9m86

Z-Wave S0 Decryption Vulnerability in End Devices

Published Mar 7, 2024 · Updated Sep 25, 2024 · Assigned by Silabs

Description

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

Affected products

VendorProductAffectedFixed
Silicon Labs Z-Wave SDK — 7.20.0

References