VULNERABILITY INTELLIGENCE

CVE-2023-51393

CVSS score5.3 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2024-02-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.

Weakness classification

  • product-security@silabs.com: CWE-770
  • nvd@nist.gov: CWE-770

Primary references