Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-41095

Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Silabs

Description

Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs OpenThread SDK: 2.3.1 and earlier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com OpenThread SDK

Default version status: affected

  • 2.3.2unaffected

References