Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices
CVE-2023-41096

6.1MEDIUM

Key Information:

Vendor

silabs.com

Status
Ember ZNet SDK
Vendor
CVE Published:
26 October 2023

What is CVE-2023-41096?

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash.

This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.

Affected Version(s)

Ember ZNet SDK 32 bit 7.3.2

References

https://siliconlabs.lightning.force.com/sfc/servlet.sheph...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.