CVE-2023-2747

Summary

The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.

Affected Software

Weaknesses

• CWE-1204: CWE-1204 Generation of Weak Initialization Vector (IV)

ADP Enrichment

CVE Program Container

Additional References

• https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U2sFvQAJ?operationContext=S1
• https://github.com/SiliconLabs/gecko_sdk

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U2sFvQAJ?operationContext=S1
• https://github.com/SiliconLabs/gecko_sdk

• ←Previous
• Next→