CVE-2023-0970

Multiple buffer overflow vulnerabilities affect SiLabs Z/IP Gateway SDK versions 7.18.01 and earlier . The root cause is memory corruption that an attacker with invasive physical access to a Z‑Wave controller device can exploit to overwrite global memory and potentially execute arbitrary code. Im...

CVE-2023-0969 Global read overflow in Z/IP Gateway

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory...

CVE-2023-0969

CVE-2023-0969 affects SiLabs Z/IP Gateway (versions 7.18.01 and earlier). An authenticated attacker within Z-Wave range can manipulate an array pointer to disclose contents of global memory. Exploitation characteristics in the sources indicate an adjacent attack vector with low impact: confidenti...

CVE-2023-0969 Global read overflow in Z/IP Gateway

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory...

PT-2023-16656 · Silabs · Silabs Z/Ip Gateway

Name of the Vulnerable Software and Affected Versions: SiLabs Z/IP Gateway versions 7.18.01 and earlier Description: A vulnerability in the software allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. Recommendations: For version...

PT-2023-16654 · Silicon · Silabs Z/Ip Gateway

Name of the Vulnerable Software and Affected Versions: SiLabs Z/IP Gateway SDK versions 7.18.01 and earlier Description: Multiple buffer overflow vulnerabilities allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute...

PT-2023-16655 · Silabs · Silabs Z/Ip Gateway

Name of the Vulnerable Software and Affected Versions: SiLabs Z/IP Gateway SDK versions 7.18.02 and earlier Description: A logic error allows authentication to be bypassed, enabling remote administration of Z-Wave controllers and the recovery of S0/S2 encryption keys. Recommendations: For version...

PT-2023-16653 · Silicon · Silabs Z/Ip Gateway

Name of the Vulnerable Software and Affected Versions: SiLabs Z/IP Gateway versions 7.18.01 and earlier Description: A vulnerability allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory. Recommendations: For SiLabs Z/IP...

PT-2023-23154 · Silicon · Silabs Unify Gateway

Name of the Vulnerable Software and Affected Versions: SiLabs Unify Gateway versions 1.3.1 and earlier Description: A vulnerability in the software allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. Recommendations: For versions...

CVE-2023-34597

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34597

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34597

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

Design/Logic Flaw

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

Design/Logic Flaw

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34597

A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

CVE-2023-34596 concerns the Aeotec WallMote Switch, firmware v2.3. Several connected sources confirm a vulnerability that allows a crafted Z-Wave message to cause a Denial of Service. Affected component: WallMote Switch firmware 2.3. Reported impact is Availability disruption (DoS); attack vector...