Approved changes feed: RSS · Atom

cpe:2.3:a:silicon_labs:z/ip_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSilicon Labs (e0e4a3d4-8910-5169-b452-cd7cc713af8f)
ProductZ/Ip Gateway (92b6216b-eda6-583d-ae33-60ba3558647b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0972 not_vulnerable 2026-06-03 14:48:53.432001 Buffer overflow in S0 Decryption on Z/IP Gatweay
CRITICAL (9.6)
Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
Published: 2023-06-21T19:43:12.847Z
Updated: 2024-12-06T18:27:01.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0971 not_vulnerable 2026-06-03 14:48:53.431657 Command Authentication Bypass in Z/IP Gateway
CRITICAL (9.6)
A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.
Published: 2023-06-21T19:42:25.906Z
Updated: 2024-12-06T18:27:23.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0970 not_vulnerable 2026-06-03 14:48:53.431288 Serial API Buffer Overflow in Z/IP Gateway
HIGH (7.1)
Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.
Published: 2023-06-21T19:41:46.419Z
Updated: 2024-12-06T18:27:49.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0969 not_vulnerable 2026-06-03 14:48:53.429131 Global read overflow in Z/IP Gateway
LOW (3.5)
A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.
Published: 2023-06-21T19:40:44.577Z
Updated: 2024-12-06T18:29:58.439Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.