CVE-2023-3110

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-3110
Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1 Permissions Required
Configurations

Configuration 1 (hide)

cpe:2.3:a:silabs:unify_software_development_kit:*:*:*:*:*:*:*:*
History

28 Jun 2023, 15:59

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:silabs:unify_software_development_kit:*:*:*:*:*:*:*:*
References (MISC) https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1 - (MISC) https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1 - Permissions Required
CWE CWE-119
First Time Silabs
Silabs unify Software Development Kit

21 Jun 2023, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-21 20:15

Updated : 2023-12-10 15:01

NVD link : CVE-2023-3110

Mitre link : CVE-2023-3110

CVE.ORG link : CVE-2023-3110

JSON object : View

Products Affected

silabs

  • unify_software_development_kit
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')