9.6
Critical
CVE-2023-0971 A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration…
Description
A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Z/IP Gateway 7.18 | earliest → < 7.18.03 | 7.18.03 |
Other CVEs of Z/IP Gateway
The 4 CVEs of Z/IP Gateway →
CVE-2023-0972
Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave…
9.6
Critical
CVE-2023-0970
Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with…
7.1
High
CVE-2023-0969
A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to…
3.5
Low