CVE-2023-6874 Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number

Description

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number

Affected products and versions

Product	Affected versions	Fixed in
GSDK 0.0	0.0 → < 7.4.0	7.4.0
gecko_software_development_kit 7.4	earliest → < 7.4.0	7.4.0

Other CVEs of GSDK

The 12 CVEs of GSDK →

CVE-2024-22473 TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices 6.8 Medium CVE-2024-0240 A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending… 6.5 Medium CVE-2023-6387 A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a… 7.5 High CVE-2023-5138 Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB,… 6.8 Medium