CVE-2024-23937 Silicon Labs Gecko OS Debug Interface Format String

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the debug interface. The issue results from the lack of proper...

CVE-2024-23937 Silicon Labs Gecko OS Debug Interface Format String

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the debug interface. The issue results from the lack of proper...

Silicon Gecko OS 安全漏洞

Silicon Gecko OS is a highly optimized but feature-rich IoT operating system from Silicon, Inc. A security vulnerability exists in Silicon Gecko OS that stems from a missing HTTP GET request data length validation...

Silicon Labs Gecko OS 安全漏洞

Silicon Labs Gecko OS is a highly optimized and feature-rich operating system for the Internet of Things from Silicon Labs, USA. A security vulnerability exists in Silicon Labs Gecko OS that stems from a missing debug interface format string validation...

Silicon Gecko OS 安全漏洞

Silicon Gecko OS is a highly optimized but feature-rich IoT operating system from Silicon, Inc. A security vulnerability exists in Silicon Gecko OS that stems from a missing data length validation of the httpdownload command...

CVE-2024-23973 Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP GET requests. The issue results from the lack of...

CVE-2024-23973 Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP GET requests. The issue results from the lack of...

CVE-2024-23973

CVE-2024-23973 affects Silicon Labs Gecko OS. The vulnerability stems from improper validation of the length of user-supplied data during HTTP GET handling, leading to a stack-based buffer overflow. This flaw enables network-adjacent attackers to execute arbitrary code in the device’s context wit...

CVE-2024-24731 Silicon Labs Gecko OS http_download Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the httpdownload command. The issue results from t...

CVE-2024-24731

CVE-2024-24731 affects Silicon Labs Gecko OS. The vulnerability is a stack-based buffer overflow in the http_download command caused by insufficient validation of user-supplied data length, enabling network-adjacent attackers to execute arbitrary code with device context and no authentication. Do...

CVE-2024-24731 Silicon Labs Gecko OS http_download Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the httpdownload command. The issue results from t...

Silicon Simplicity SDK 安全漏洞

Silicon Simplicity SDK is an embedded software development platform from Silicon, Inc. for building IoT products based on our Series 2 and upcoming Series 3 wireless and MCU devices. A security vulnerability exists in the Silicon Simplicity SDK that stems from a misformatted packet that could cau...

CVE-2024-9490

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9490

CVE-2024-9490 concerns DLL hijacking due to an uncontrolled search path in Silicon Labs (8‑bit) IDE installer. The vulnerability allows privilege escalation and arbitrary code execution when running the impacted installer. Affected software is the Silicon Labs IDE installer (8‑bit). Root cause is...

CVE-2024-9490 Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

Silicon Configuration Wizard 2 installer 代码问题漏洞

Silicon Configuration Wizard 2 installer is a Configuration Wizard 2 installer from Silicon Corporation. A security vulnerability exists in the Silicon Configuration Wizard 2 installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges...

Silicon CP210x VCP Windows installer 代码问题漏洞

Silicon CP210x VCP Windows installer is a CP210x VCP Windows installer from Silicon Corporation. A security vulnerability exists in Silicon CP210x VCP Windows installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute...

Silicon USBXpress Dev Kit installer 代码问题漏洞

Silicon USBXpress Dev Kit installer is a USBXpress Dev Kit installer from Silicon. A security vulnerability exists in the Silicon USBXpress Dev Kit installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary...

Silicon CP210 VCP Win 2k installer 代码问题漏洞

Silicon CP210 VCP Win 2k installer is a CP210 VCP Win 2k installer from Silicon. A security vulnerability exists in the Silicon CP210 VCP Win 2k installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

Silicon USBXpress 4 SDK installer 代码问题漏洞

Silicon USBXpress 4 SDK installer is a USBXpress 4 SDK installer from Silicon. A security vulnerability exists in the Silicon USBXpress 4 SDK installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...