Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-41096

Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Silabs

Description

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com Ember ZNet SDK

Default version status: affected

  • 7.3.2unaffected

References