Description
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Silicon Labs | Connect SDK | 4.0.0 – ≤ 4.3.1, ≤ 3.7.7 | — |
References
- https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md vendor-advisory permissions-required
- https://github.com/SiliconLabsSoftware/sisdk-release/ patch