5.3
Medium
CVE-2023-51393 Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon…
Description
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ember ZNet SDK | Versions not published | |
| emberznet_sdk 7.4 | earliest → < 7.4.0.0 | 7.4.0.0 |
Other CVEs of Ember ZNet SDK
The 6 CVEs of Ember ZNet SDK →
CVE-2024-10106
A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's…
3.7
Low
CVE-2024-3043
An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their…
7.5
High
CVE-2023-51394
High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before…
5.3
Medium
CVE-2023-51392
Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators,…
6.2
Medium