CVE-2023-0969

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.
Configurations

Configuration 1 (hide)

cpe:2.3:a:silabs:z\/ip_gateway_sdk:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:38

Type Values Removed Values Added
References () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1 - Permissions Required () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1 - Permissions Required

25 Sep 2024, 16:15

Type Values Removed Values Added
CWE CWE-787

28 Jun 2023, 14:59

Type Values Removed Values Added
CWE CWE-119
References (MISC) https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1 - (MISC) https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1 - Permissions Required
First Time Silabs z\/ip Gateway Sdk
Silabs
CPE cpe:2.3:a:silabs:z\/ip_gateway_sdk:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.5

21 Jun 2023, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-21 20:15

Updated : 2024-11-21 07:38


NVD link : CVE-2023-0969

Mitre link : CVE-2023-0969

CVE.ORG link : CVE-2023-0969


JSON object : View

Products Affected

silabs

  • z\/ip_gateway_sdk
CWE
CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer