CVE-2023-6874

2024-02-0518:15:51

Google

osv.dev

ember znet

denial of service

nwk sequence number

software

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.6%

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number

CPENameOperatorVersion
gecko_sdkeq4.2.0
gecko_sdkeq4.2.3
gecko_sdkeq4.3.2
gecko_sdkeq4.2.2
gecko_sdkeq4.3.0
gecko_sdkeq4.3.1
gecko_sdkeq4.2.1

Name	Operator	Version
gecko_sdk	eq	4.2.0
gecko_sdk	eq	4.2.3
gecko_sdk	eq	4.3.2
gecko_sdk	eq	4.2.2
gecko_sdk	eq	4.3.0
gecko_sdk	eq	4.3.1
gecko_sdk	eq	4.2.1

References

community.silabs.com/069Vm000000WXaOIAW

github.com/SiliconLabs/gecko_sdk