Lucene search

K
cve[email protected]CVE-2023-0969
HistoryJun 21, 2023 - 8:15 p.m.

CVE-2023-0969

2023-06-2120:15:09
CWE-119
CWE-125
web.nvd.nist.gov
13
silabs
z/ip gateway
cve-2023-0969
vulnerability
authenticated attacker
array pointer
global memory

3.5 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.

Affected configurations

NVD
Node
silabsz\/ip_gateway_sdkRange7.18.01

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Z/IP Gateway",
    "vendor": "Silicon Labs",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.18.03"
      }
    ]
  }
]

3.5 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-0969