Aller au contenu
Se connecter
6.4 Moyenne

CVE-2023-4489 The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP…

Description

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access.

Produits et versions touchés

Produit Versions touchées Corrigé en
Z/IP Gateway SDK 7.18 premières → 7.18.3 Pas de correctif indiqué

Autres CVE de Z/IP Gateway SDK

Les 3 CVE de Z/IP Gateway SDK →
CVE-2024-3052 Malformed S2 Nonce Get command classes can be sent to crash the gateway 7.5 Élevée CVE-2024-3051 Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device 7.5 Élevée
Suivre cette CVE