Approved changes feed: RSS · Atom
cpe:2.3:a:silabs:emberznet:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Silabs (23d6bce5-f2eb-5a47-a0ef-8e615f48c9bf) |
|---|---|
| Product | Emberznet (63c7d13e-2561-57ca-9aa4-3dc4f22e02f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/siliconlabs/gecko_sdk |
purl2cpe | 2026-06-01 10:18:16.413193 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-51394 |
vulnerable | 2026-06-08 06:16:17.433962 |
Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash
MEDIUM (5.3)
High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash.
Published: 2024-02-23T19:13:37.199Z
Updated: 2024-08-16T19:31:32.322Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51393 |
vulnerable | 2026-06-08 06:16:17.432156 |
Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer
MEDIUM (5.3)
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.
Published: 2024-02-23T19:14:23.817Z
Updated: 2025-04-22T16:15:09.433Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51392 |
vulnerable | 2026-06-08 06:16:17.430785 |
Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
MEDIUM (6.2)
Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.
Published: 2024-02-23T16:12:41.261Z
Updated: 2025-04-22T16:15:25.335Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41094 |
vulnerable | 2026-06-08 06:11:05.201135 |
Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet
CRITICAL (10)
TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration
This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected
Published: 2023-10-04T20:01:16.250Z
Updated: 2024-09-26T21:39:11.670Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.