CVE-2023-41095

MEDIUM

Silicon Labs OpenThread SDK <2.3.1 - Info Disclosure

Title source: llm

Description

Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs OpenThread SDK: 2.3.1 and earlier.

References (1)

[Permissions Required] https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

Scores

CVSS v3 6.8

EPSS 0.0004

EPSS Percentile 10.6%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-312 CWE-311

Status published

Products (1)

silabs/openthread_sdk < 2.3.1.0

Published Oct 26, 2023

Tracked Since Feb 18, 2026