Lucene search
HistoryOct 26, 2023 - 2:15 p.m.
CVE-2023-41096
cve-2023-41096
encryption
security keys
silicon labs
32 bit
arm
securevault high
modification
extraction
network credentials
flash
vulnerability
CVSS3
6.1
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
17.0%
Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules)
allows potential modification or extraction of network credentials stored in flash.
This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.
Affected configurations
Node
silabsemberznet_sdkRange≤7.3.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| silabs | emberznet_sdk | * | cpe:2.3:a:silabs:emberznet_sdk:*:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
cvelist
cvelist
prion
prion
Design/Logic Flaw
2023-10-26 14:15:00
cve
cve
CVE-2023-41096
2023-10-26 14:15:08
CVSS3
6.1
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
17.0%
Related for NVD:CVE-2023-41096