CVE-2023-0972: Buffer overflow in S0 Decryption on Z/IP Gatweay
9.6
CVSS
Description
Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
Classification
CVE ID: CVE-2023-0972
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.6
Affected Products
Vendor: Silicon Labs
Product: Z/IP Gateway
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.07% (probability of being exploited)
EPSS Percentile: 30.95% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)