8.8
Élevée
CVE-2023-51395 The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices
Description
The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Z-Wave SDK 7.20 | premières → < 7.20.0 | 7.20.0 |
| Z-Wave SDK 7.19 | premières → < 7.19.3 | 7.19.3 |
| Z-Wave SDK 7.18 | premières → < 7.18.8 | 7.18.8 |
| Z-Wave SDK 7.17 | premières → < 7.17.5 | 7.17.5 |
| z-wave_software_development_kit 7.19 | premières → < 7.19.0 | 7.19.0 |
| z-wave_software_development_kit 7.18 | premières → < 7.18.0 | 7.18.0 |
Autres CVE de Z-Wave SDK
Les 4 CVE de Z-Wave SDK →
CVE-2026-89410
In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive…
5.1
Moyenne
CVE-2026-89409
In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing…
5.3
Moyenne
CVE-2024-22472
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential…
8.1
Élevée