Z/Ip Gateway Sdk
Approved changes feed: RSS · Atom
cpe:2.3:a:silabs:z\/ip_gateway_sdk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Silabs (23d6bce5-f2eb-5a47-a0ef-8e615f48c9bf) |
|---|---|
| Product | Z/Ip Gateway Sdk (77d1da8a-2df5-551f-8112-d4d9011e9879) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4489 |
vulnerable | 2026-06-08 06:16:12.745517 |
Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key
MEDIUM (6.4)
The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access.
Published: 2023-12-14T23:00:29.693Z
Updated: 2025-05-21T14:29:37.355Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0972 |
vulnerable | 2026-06-08 05:52:33.553538 |
Buffer overflow in S0 Decryption on Z/IP Gatweay
CRITICAL (9.6)
Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
Published: 2023-06-21T19:43:12.847Z
Updated: 2024-12-06T18:27:01.552Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0971 |
vulnerable | 2026-06-08 05:52:33.553100 |
Command Authentication Bypass in Z/IP Gateway
CRITICAL (9.6)
A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.
Published: 2023-06-21T19:42:25.906Z
Updated: 2024-12-06T18:27:23.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0970 |
vulnerable | 2026-06-08 05:52:33.552614 |
Serial API Buffer Overflow in Z/IP Gateway
HIGH (7.1)
Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.
Published: 2023-06-21T19:41:46.419Z
Updated: 2024-12-06T18:27:49.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0969 |
vulnerable | 2026-06-08 05:52:33.552177 |
Global read overflow in Z/IP Gateway
LOW (3.5)
A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.
Published: 2023-06-21T19:40:44.577Z
Updated: 2024-12-06T18:29:58.439Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.