CVE-2023-51393

Published: Feb 23, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.

Affected (1)

Products: Silabs: Emberznet

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Silabs Emberznet	Before 7.4.0

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://community.silabs.com/068Vm000001NaAM

Source: product-security@silabs.com

Permissions Required

https://community.silabs.com/068Vm000001NaAM

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.