Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-41094

Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Silabs

Description

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Silicon Labs Ember ZNet

Default version status: unaffected

  • 7.1.3 to ≤ 7.1.5affected
  • 7.2.0 to ≤ 7.2.3affected
  • 7.3.0unaffected

References