CVE-2023-6874

Summary

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number

Affected Software

Weaknesses

• CWE-312: CWE-312 Cleartext Storage of Sensitive Information

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/SiliconLabs/gecko_sdk
• https://community.silabs.com/069Vm000000WXaOIAW

References

• https://github.com/SiliconLabs/gecko_sdk
• https://community.silabs.com/069Vm000000WXaOIAW

• ←Previous
• Next→