Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2023-4489

Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key

Description

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com Z/IP Gateway SDK

Default version status: affected

  • 0 to ≤ 7.18.3affected

References