CVE-2023-0969: Global read overflow in Z/IP Gateway

3.5 CVSS

Description

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.

Classification

CVE ID: CVE-2023-0969

CVSS Base Severity: LOW

CVSS Base Score: 3.5

Affected Products

Vendor: Silicon Labs

Product: Z/IP Gateway

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 14.88% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1

Timeline