silabs.com Vulnerabilities and Affected Products
Vulnerabilities associated with Gecko Bootloader.
Products
Clear product- GSDK12 vulnerabilities
- Gecko Platform10 vulnerabilities
- Simplicity SDK8 vulnerabilities
- Gecko SDK7 vulnerabilities
- WiseConnect7 vulnerabilities
- Ember ZNet SDK6 vulnerabilities
- BT1223 vulnerabilities
- RS9116 Bluetooth SDK3 vulnerabilities
- SiSDK3 vulnerabilities
- Z/IP Gateway SDK3 vulnerabilities
- Ember ZNet2 vulnerabilities
- Gecko Bootloader2 vulnerabilities
- PC Controller2 vulnerabilities
- Bluetooth SDK1 vulnerability
- Configuration Wizard 21 vulnerability
- CP210 VCP Win 2k1 vulnerability
- CP210x VCP Windows1 vulnerability
- EFR32 BLE SDK1 vulnerability
- EmberZNet1 vulnerability
- Flash Programming Utility1 vulnerability
- OpenThread1 vulnerability
- OpenThread SDK1 vulnerability
- RS9116W1 vulnerability
- SE Firmware1 vulnerability
- Series 2 SoCs and associated modules1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Uninitialized variable in Gecko Bootloader can leak secure stackUninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file. CWE-908Jul 28, 2023 | CVSS3.8v3.1 | EPSS0.257% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2022-24936HIGH | Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devicesOut-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade. | CVSS8.3v3.1 | EPSS0.812% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |