CVE-2023-51393

MEDIUM

Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-51393 has a selected CVSS score of 5.3 (medium).

Description

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 26, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

emberznet_sdk

Browse silabs / emberznet_sdk

Default status: unknown

CVE ListBefore 7.4.0.0affected

Ember ZNet SDK

Browse silabs.com / Ember ZNet SDKGecko SDK

Default status: affected

CVE ListBefore 7.4.0.0unaffected

References

2