CVE-2023-0970: Serial API Buffer Overflow in Z/IP Gateway
7.1
CVSS
Description
Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.
Classification
CVE ID: CVE-2023-0970
CVSS Base Severity: HIGH
CVSS Base Score: 7.1
Affected Products
Vendor: Silicon Labs
Product: Z/IP Gateway
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.07% (probability of being exploited)
EPSS Percentile: 34.38% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)