5.7
Medium
CVE-2023-5310 A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK…
Description
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gecko SDK 7.20 | earliest → 7.20.3 | No fix stated |
Other CVEs of Gecko SDK
The 6 CVEs of Gecko SDK →
CVE-2025-14547
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs…
2.3
Low
CVE-2025-12986
When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service…
6.0
Medium
CVE-2025-8414
Due to improper input validation, a buffer overflow vulnerability is present in
Zigbee EZSP Host Applications
9.4
Critical
CVE-2024-4013
A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection List (RPL)…
5.6
Medium