Lucene search
K

6 matches found

Circl
Circl
added 2024/01/11 10:56 a.m.3 views

CVE-2023-4489

creationtimestamp| type| source ---|---|--- 2024-01-11 10:56:59+00:00| seen| https://t.me/ctinow/166444 2025-05-21 14:43:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17121...

9.8CVSS8.7AI score0.00692EPSS
Exploits0References2
OSV
OSV
added 2023/12/14 11:15 p.m.1 views

CVE-2023-4489

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access...

9.8CVSS5.8AI score0.00692EPSS
Exploits0References2
CVE
CVE
added 2023/12/14 11:0 p.m.37 views

CVE-2023-4489

The CVE affects Silicon Labs Z/IP Gateway SDK-based Z/IP Gateway products, specifically versions prior to 7.18.3. The first S0 encryption key is generated using an uninitialized PRNG at startup, making it predictable and enabling potential network key prediction and unauthorized S0 network access...

9.8CVSS8AI score0.00692EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/14 11:0 p.m.5 views

CVE-2023-4489 Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access...

6.4CVSS9.4AI score0.00692EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/12/14 11:0 p.m.11 views

CVE-2023-4489 Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access...

6.4CVSS9.6AI score0.00692EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/11/21 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2023:4489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7AI score0.00537EPSS
Exploits0References4
Rows per page
Query Builder