Vulnerabilities > Silabs > Emberznet > 1.0.0

DATE CVE VULNERABILITY TITLE RISK
2024-02-23 CVE-2023-51393 Allocation of Resources Without Limits or Throttling vulnerability in Silabs Emberznet
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.
network
low complexity
silabs CWE-770
7.5
2024-02-23 CVE-2023-51394 NULL Pointer Dereference vulnerability in Silabs Emberznet
High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash.
network
low complexity
silabs CWE-476
7.5
2022-11-14 CVE-2022-24937 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silabs Emberznet 1.0.0
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers.
network
low complexity
silabs CWE-119
critical
9.8
2022-11-14 CVE-2022-24938 Out-of-bounds Write vulnerability in Silabs Emberznet 1.0.0
A malformed packet causes a stack overflow in the Ember ZNet stack.
network
low complexity
silabs CWE-787
7.5