CVE-2023-3110: Buffer overflow in S0 Decryption on Unify Gateway

9.6 CVSS

Description

Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

Classification

CVE ID: CVE-2023-3110

CVSS Base Severity: CRITICAL

CVSS Base Score: 9.6

Affected Products

Vendor: Silicon Labs

Product: Unify Gateway

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.07% (probability of being exploited)

EPSS Percentile: 30.95% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1

Timeline