CVE-2024-23937

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the debug interface. The issue results from the lack of proper...

CVE-2024-23937

creationtimestamp| type| source ---|---|--- 2025-01-31 00:12:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113920073751259305 2025-01-31 00:17:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypv5knv42t 2025-01-31 00:17:46+00:00| seen|...

CVE-2024-23937

CVE-2024-23937 – Silicon Labs Gecko OS : The exposed issue lies in the debug interface of Gecko OS, where a user-supplied string is used as a format specifier without proper validation. This enables network-adjacent attackers to disclose sensitive information and, in combination with other vulner...