The Lords of Silicon Valley Are Thrilled to Present a ‘Handheld Iron Dome’

ZeroMark wants to build a system that will let soldiers easily shoot a drone out of the sky with the weapons they’re already carrying—and venture capital firm a16z is betting the startup can pull it off...

Silicon Labs Gecko SDK Security Vulnerability

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in the Silicon Labs Gecko SDK that stems from meshnodepoweroff's inabili...

UBUNTU-CVE-2023-52657

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/pm: resolve reboot exception for si oland" This reverts commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86. This causes hangs on SI when DC is enabled and errors on driver reboot and power off cycles...

CVE-2024-22472

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...

CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...

CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices...

CVE-2024-22472

Summary: CVE-2024-22472 concerns Silicon Labs 500 Series Z-Wave devices. A buffer overflow in the 500 Series SDK (versions prior to v6.85.2) can occur when processing certain frames (long S0 frames) on 500 Series Z‑Wave devices, leading to Denial of Service and potentially remote code execution. ...

Silicon Labs 500 Series Z-Wave 安全漏洞

Silicon Labs Z-Wave Chipsets are a type of chipset in the smart home ecosystem from Silicon Labs. A security vulnerability exists in the Silicon Labs 500 Series Z-Wave. An attacker exploited the vulnerability to cause a denial of service and potentially remote code execution...

PT-2024-19441 · Silicon · Silicon Labs 500 Series +1

Name of the Vulnerable Software and Affected Versions: Silicon Labs 500 Series Z-Wave devices versions prior to v6.85.2 Description: A buffer overflow issue may allow Denial of Service and potential remote code execution. This issue affects Silicon Labs 500 Series SDK running on Silicon Labs 500...

Vulnerabilities in employee management system could lead to remote code execution, login credential theft

Cisco Talos Vulnerability Research team has disclosed more than a dozen vulnerabilities over the past three weeks, five in a device that allows employees to check in and out of their shifts, and another that exists in an open-source library used in medical device imaging files. The Peplink Smart...

Silicon Labs Gecko Platform HTTP server header parsing invalid pointer dereference vulnerability

Talos Vulnerability Report TALOS-2024-1945 Silicon Labs Gecko Platform HTTP server header parsing invalid pointer dereference vulnerability April 18, 2024 CVE Number CVE-2023-51391 SUMMARY An invalid pointer dereference vulnerability exists in the HTTP server header parsing functionality of Silic...

Big Tech Says Spy Bill Turns Its Workers Into Informants

One of Silicon Valley’s most influential lobbying arms joins privacy reformers in a fight against the Biden administration–backed expansion of a major US surveillance program...

CVE-2023-51395

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

Design/Logic Flaw

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

CVE-2023-51395 Z-Wave S0 Decryption Vulnerability in End Devices

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

CVE-2023-51395

CVE-2023-51395 refers to Silicon Labs Z-Wave end devices (root from CVE-2023-0972). The vulnerability involves a stack buffer overflow in Z-Wave processing that an unauthenticated attacker within Z-Wave range can trigger, potentially causing arbitrary code execution. Documented impact is high (CV...

CVE-2023-51395 Z-Wave S0 Decryption Vulnerability in End Devices

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

PT-2024-14108 · Silicon · Z-Wave

Name of the Vulnerable Software and Affected Versions: Silicon Labs Z-Wave affected versions not specified Description: The issue may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. Recommendations: At the moment, there is no...

Z-Wave Security Breach

Z-Wave is a wireless communication protocol used primarily for home automation. It is a mesh network that uses low power consumption radio waves to communicate from device to device to wirelessly control appliances and other devices in the home, such as controlling lighting, security systems,...

SUSE CVE-2021-46917

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workaround where wq reset does not clear WQCFG registers was leaked into upstream code. Use wq reset command instead of blasting the MMIO region. Th...