CVE-2023-41096

MEDIUM

Silicon Labs Ember ZNet SDK <7.3.1 - Info Disclosure

Title source: llm

Description

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.

References (1)

[Permissions Required] https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

Scores

CVSS v3 6.8

EPSS 0.0002

EPSS Percentile 4.9%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-312 CWE-311

Status published

Products (1)

silabs/emberznet_sdk < 7.3.1.0

Published Oct 26, 2023

Tracked Since Feb 18, 2026