Skip to contentSilabs vulnerabilities
Newest
- silabs gecko software development kit, silabs.com gsdk +1 moreUnvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memoryCVE-2023-40209.0 Critical
- silabs.com gecko sdk, silabs z-wave software development kit +1 moreZ-Wave Denial of Service caused by Stream of PacketsCVE-2023-53105.7 Medium
- silabs.com z/ip gateway sdk, silabs z\/ip gateway sdk +1 moreZ/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption KeyCVE-2023-44896.4 Medium
- weston embedded uc-http, silabs gecko platform, gecko software development kit +1 more +3 moreA memory corruption vulnerability exists in the HTTP Server header parsing functionality of...CVE-2023-283919.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston...CVE-2023-251819.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreAn out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded...CVE-2023-245857.7 High
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston...CVE-2023-283799.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality...CVE-2023-278829.0 Critical
- weston embedded uc-http, silabs gecko software development kit, silicon labs gecko platform +1 more +3 moreA memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of...CVE-2023-312479.0 Critical
- silabs.com ember znet sdk, silabs emberznet sdk +1 moreKeys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devicesCVE-2023-410966.8 Medium
- silabs openthread sdkKeys Stored in Plaintext on Secure Vault High for Silabs OpenThread devicesCVE-2023-410956.8 Medium
- silabs gecko bootloader, silabs.com gsdk +1 moreInteger overflow in Silicon Labs Gecko Bootloader leads to unbounded memory accessCVE-2023-34877.7 High
- silabs uc\/tcp-ipIn Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.CVE-2020-276309.8 Critical
- silicon labs ember znet, silabs emberznet +1 moreTouchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNetCVE-2023-4109410.0 Critical
- silabs gecko software development kit, silabs.com gsdk +1 moreBluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory accessCVE-2023-30245.9 Medium
- silabs gecko bootloaderSecond Stage Gecko Bootloader GBL Parser Buffer Overrun VulnerabilityCVE-2023-40419.8 Critical
- silabs.com gecko bootloader, silabs gecko software development kit +1 moreUninitialized variable in Gecko Bootloader can leak secure stackCVE-2023-34883.8 Low
- silicon labs unify gateway, silabs unify software development kit +1 moreBuffer overflow in S0 Decryption on Unify GatewayCVE-2023-31109.6 Critical
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreBuffer overflow in S0 Decryption on Z/IP GatweayCVE-2023-09729.6 Critical
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreCommand Authentication Bypass in Z/IP GatewayCVE-2023-09719.6 Critical
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreSerial API Buffer Overflow in Z/IP GatewayCVE-2023-09707.1 High
- silicon labs z/ip gateway, silabs z\/ip gateway sdk +1 moreGlobal read overflow in Z/IP GatewayCVE-2023-09693.5 Low
- silabs gecko software development kit, silabs.com gsdk +1 moreUninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored dataCVE-2023-27473.1 Low
- silabs bluetooth low energy software development kit, silabs.com bluetooth sdk +1 moreConnection update while closing connection may lead to denial-of-serviceCVE-2023-26835.3 Medium
- silabs gecko software development kit, silabs.com gecko platform +1 moreBuffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or...CVE-2023-26869.8 Critical
- silabs.com gecko sdk, silabs gecko software development kit +1 moreBuffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows...CVE-2023-26872.9 Low
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-321005.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-320995.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-320985.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-320973.1 Low
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-320963.1 Low
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-24815.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-11325.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDKCVE-2023-09653.1 Low
- silabs gecko software development kit, silabs.com gsdk +1 moreBluetooth LE Invalid prepare write request command leads to denial of serviceCVE-2023-07756.5 Medium
- silabs.com wi-sun linux border router, silabs wireless smart ubiquitous network linux border router firmware +1 moreMissing MAC layer security in Wi-SUN Linux Border RouterCVE-2023-12628.2 High
- silabs.com wi-sun sdk, silabs wi-sun software development kit +1 moreMissing MAC layer security in Wi-SUN SDKCVE-2023-12618.2 High
- silabs.com ember znet, silabs gecko software development kit, zigbee emberznet +2 moreMalformed Zigbee packet with invalid destination address causes AssertCVE-2022-249395.7 Medium
- silabs emberznet, silabs.com ember znet +1 moreMalformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlierCVE-2022-249386.5 Medium
- silabs emberznet, silicon labs ember znet +1 moreMalformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlierCVE-2022-249376.5 Medium
- silabs micrium uc-http, silabs.com gecko platform +1 moreHeap-based buffer overflow in MicriumOS HTTP Server allows potential remote code executionCVE-2022-249429.1 Critical
- silabs gecko bootloaderGecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devicesCVE-2022-249368.3 High
- silabs sd3502 firmware, sd3503 firmware, zm5101 firmware +2 more +4 moreDenial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave...CVE-2022-24611Public exploit6.5 Medium
- micrium os, silabs micrium os +1 moreMicrium OS Integer Overflow or WraparoundCVE-2021-274116.5 Medium
- silicon labs z-wave, silabs zgm130s037hgn firmware, zgm2305a27hgn firmware +3 more +5 moreThe Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure...CVE-2018-250298.1 High
- sierra designs z-wave, silabs zgm130s037hgn firmware, zgm2305a27hgn firmware +3 more +5 moreZ-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a...CVE-2013-200038.3 High
- silabs 700 series firmware, uzb-7 +1 moreZ-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate...CVE-2020-101376.5 Medium
- aeon labs zw090-a, samsung sth-eth-200, silabs uzb-7 +5 more +7 moreZ-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited...CVE-2020-90616.5 Medium
- aeon labs zw090-a, fibaro fgwpb-111, silicon labs 500 series +4 more +6 moreZ-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not...CVE-2020-90606.5 Medium
- schlage be468, silicon labs 500 series, silabs 500 series firmware +2 moreZ-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible...CVE-2020-90596.5 Medium
- Show moreLoading…