Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices

CVE-2023-41095

What is CVE-2023-41095?

The missing encryption of security keys vulnerability in Silicon Labs OpenThread SDK on 32-bit ARM devices allows attackers to potentially modify or extract sensitive network credentials stored in flash memory. This vulnerability could lead to unauthorized access or manipulation of network settings, posing significant risks to the integrity and confidentiality of affected systems. Users are encouraged to update to the latest version to mitigate these risks and enhance their security posture.

References