silabs Vulnerability Advisory Catalog

Total 94 security vulnerabilities recorded for silabs software and firmware.

← Back to All Vendors
Component: emberznet_sdk

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modificat...

๐Ÿ“… 2023-10-26
CVSS 6.8 Dossier →
Component: openthread_sdk

Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM (SecureVault High modules) allows potential modificati...

๐Ÿ“… 2023-10-26
CVSS 6.8 Dossier →
Component: gecko_bootloader

An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage ...

๐Ÿ“… 2023-10-20
CVSS 7.7 Dossier →
CVE-2020-27630 CRITICAL
Component: uc\/tcp-ip

In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random....

๐Ÿ“… 2023-10-10
CVSS 9.8 Dossier →
CVE-2023-41094 CRITICAL
Component: emberznet

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effect...

๐Ÿ“… 2023-10-04
CVSS 10.0 Dossier →
CVE-2023-3024 MEDIUM
Component: gecko_software_development_kit

Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access....

๐Ÿ“… 2023-09-29
CVSS 5.9 Dossier →
CVE-2023-4041 CRITICAL
Component: gecko_bootloader

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in...

๐Ÿ“… 2023-08-23
CVSS 9.8 Dossier →
Component: gecko_software_development_kit

Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file. ...

๐Ÿ“… 2023-07-28
CVSS 3.8 Dossier →
CVE-2023-3110 CRITICAL
Component: unify_software_development_kit

Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buff...

๐Ÿ“… 2023-06-21
CVSS 9.6 Dossier →
CVE-2023-0972 CRITICAL
Component: z\/ip_gateway_sdk

Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buf...

๐Ÿ“… 2023-06-21
CVSS 9.6 Dossier →
CVE-2023-0971 CRITICAL
Component: z\/ip_gateway_sdk

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0...

๐Ÿ“… 2023-06-21
CVSS 9.6 Dossier →
Component: z\/ip_gateway_sdk

Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z...

๐Ÿ“… 2023-06-21
CVSS 7.1 Dossier →
Component: z\/ip_gateway_sdk

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disc...

๐Ÿ“… 2023-06-21
CVSS 3.5 Dossier →
Component: gecko_software_development_kit

The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized....

๐Ÿ“… 2023-06-15
CVSS 3.1 Dossier →
CVE-2023-2683 MEDIUM
Component: bluetooth_low_energy_software_development_kit

A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate co...

๐Ÿ“… 2023-06-15
CVSS 5.3 Dossier →
CVE-2023-2686 CRITICAL
Component: gecko_software_development_kit

Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the...

๐Ÿ“… 2023-06-15
CVSS 9.8 Dossier →
Component: gecko_software_development_kit

Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the heap....

๐Ÿ“… 2023-06-02
CVSS 2.9 Dossier →
Component: gecko_software_development_kit

Compiler removal of buffer clearing in sli_se_driver_mac_compute in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material dup...

๐Ÿ“… 2023-05-18
CVSS 5.3 Dossier →
Component: gecko_software_development_kit

Compiler removal of buffer clearing in sli_se_sign_hashย in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplica...

๐Ÿ“… 2023-05-18
CVSS 5.3 Dossier →
Component: gecko_software_development_kit

Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material...

๐Ÿ“… 2023-05-18
CVSS 5.3 Dossier →
Component: gecko_software_development_kit

Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier result...

๐Ÿ“… 2023-05-18
CVSS 3.1 Dossier →
Component: gecko_software_development_kit

Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier result...

๐Ÿ“… 2023-05-18
CVSS 3.1 Dossier →
CVE-2023-2481 MEDIUM
Component: gecko_software_development_kit

Compiler removal of buffer clearing in sli_se_opaque_import_key in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material ...

๐Ÿ“… 2023-05-18
CVSS 5.3 Dossier →
CVE-2023-1132 MEDIUM
Component: gecko_software_development_kit

Compiler removal of buffer clearing in sli_se_driver_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material ...

๐Ÿ“… 2023-05-18
CVSS 5.3 Dossier →
Page 3 of 4 (94 Total Records)