Vulnerabilities > Silabs > Z IP Gateway SDK > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-21 CVE-2023-0971 Incorrect Authorization vulnerability in Silabs Z/Ip Gateway SDK 7.18.01
A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.
low complexity
silabs CWE-863
8.8
2023-06-21 CVE-2023-0972 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silabs Z/Ip Gateway SDK 7.18.01
Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
low complexity
silabs CWE-119
8.8