Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2023-0971

Command Authentication Bypass in Z/IP Gateway

Description

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Silicon Labs Z/IP Gateway

Default version status: affected

  • 7.18.03unaffected

References