CVE-2023-0971: Command Authentication Bypass in Z/IP Gateway
9.6
CVSS
Description
A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.
Classification
CVE ID: CVE-2023-0971
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.6
Affected Products
Vendor: Silicon Labs
Product: Z/IP Gateway
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.07% (probability of being exploited)
EPSS Percentile: 33.63% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)