Vulnerabilities (CVE)

Filtered by CWE-1279
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-22473 2024-11-21 N/A 6.8 MEDIUM
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.
CVE-2023-4489 1 Silabs 1 Z\/ip Gateway Sdk 2024-11-21 N/A 6.4 MEDIUM
The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access.