Vulnerability · Published Feb 23, 2024 · Assigned by Silabs
CVE-2023-51393Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer
Medium 5.3
In plain English
A medium-severity resource allocation without limits in Ember ZNet SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 55.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | Ember ZNet SDK | see references |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L