Z/ip Gateway Sdk

z/ip_gateway_sdk

Vendor: Silabs • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4489 1Silabs 1Z/ip Gateway Sdk Jun 17, 2026 Dec 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potent...Show more The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access.Show less
CVE-2023-0972 1Silabs 1Z/ip Gateway Sdk Jun 17, 2026 Jun 21, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
CVE-2023-0971 1Silabs 1Z/ip Gateway Sdk Jun 17, 2026 Jun 21, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.
CVE-2023-0970 1Silabs 1Z/ip Gateway Sdk Jun 17, 2026 Jun 21, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially exe...Show more Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.Show less
CVE-2023-0969 1Silabs 1Z/ip Gateway Sdk Jun 17, 2026 Jun 21, 2023 N/A· v4 3.5 LOW· v3 N/A· v2 A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.