How severe is CVE-2023-51393?

CVE-2023-51393 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.

Is CVE-2023-51393 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (40th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-51393?

CVE-2023-51393 affects Silabs Emberznet. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2023-51393?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2023-51393 have an EU (EUVD) identifier?

Yes. CVE-2023-51393 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-56114.

When was CVE-2023-51393 published?

CVE-2023-51393 was published on 2024-02-23 and last updated on 2026-06-17.

CVE-2023-51393

CVE-2023-51393 is a medium-severity vulnerability in Silabs Emberznet with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-770.

Key facts

Severity: Medium (CVSS 3.x base score 5.3)
EPSS exploit prediction: 1% (40th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2023-56114
Weakness: CWE-770
Affected product: Silabs Emberznet
Published: 2024-02-23
Last modified: 2026-06-17

Description

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.

Frequently asked questions

What is CVE-2023-51393?: Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.
How severe is CVE-2023-51393?: CVE-2023-51393 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.
Is CVE-2023-51393 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (40th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-51393?: CVE-2023-51393 affects Silabs Emberznet. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2023-51393?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2023-51393 have an EU (EUVD) identifier?: Yes. CVE-2023-51393 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-56114.
When was CVE-2023-51393 published?: CVE-2023-51393 was published on 2024-02-23 and last updated on 2026-06-17.

References

https://community.silabs.com/068Vm000001NaAM

Affected products (1)

cpe:2.3:a:silabs:emberznet:*:*:*:*:*:*:*:*

More vulnerabilities in Silabs Emberznet

CVE-2023-41094 — Critical (CVSS 10.0): TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing…
CVE-2026-47151 — High (CVSS 7.1): In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door…
CVE-2026-47150 — High (CVSS 7.1): In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write…
CVE-2026-47147 — High (CVSS 7.1): In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A…
CVE-2026-4526 — Medium (CVSS 6.5): In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing…
CVE-2026-47154 — Medium (CVSS 6.5): In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating…

All CVEs affecting Silabs Emberznet →

Other CWE-770 (Allocation of Resources Without Limits or Throttling) vulnerabilities

CVE-2026-31283 — Critical (CVSS 9.8): In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email…
CVE-2020-37067 — Critical (CVSS 9.8): Filetto 1.0 FTP server contains a denial of service vulnerability in the FEAT command processing that allows attackers…
CVE-2021-47875 — Critical (CVSS 9.8): GeoGebra CAS Calculator 6.0.631.0 contains a denial of service vulnerability that allows attackers to crash the…
CVE-2025-11832 — Critical (CVSS 9.8): Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access…
CVE-2024-44241 — Critical (CVSS 9.8): The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia…
CVE-2022-3439 — Critical (CVSS 9.8): Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

Browse all CWE-770 (Allocation of Resources Without Limits or Throttling) vulnerabilities →