Uncontrolled Resource Consumption Vulnerability in Ember ZNet SDK Could Lead to Bus Fault and Crash

CVE-2023-51393

Summary

An uncontrolled resource consumption vulnerability exists in the Silicon Labs Ember ZNet SDK prior to version 7.4.0.0. This vulnerability can lead to significant resource exhaustion, allowing attackers to exploit the system by triggering a bus fault, which could crash the device. Consequently, the device will require a reboot to reestablish network connectivity. This issue highlights the necessity for proper resource allocation mechanisms to prevent such disruptions in operation.

References