Silabs Z/ip Gateway Sdk — known CVE vulnerabilities

Every CVE whose affected-product data names Silabs Z/ip Gateway Sdk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-0971 — CVSS 9.6 (critical): A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave…
• CVE-2023-0972 — CVSS 9.6 (critical): Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow…
• CVE-2023-0970 — CVSS 7.1 (high): Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical…
• CVE-2023-4489 — CVSS 6.4 (medium): The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3…
• CVE-2023-0969 — CVSS 3.5 (low): A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array…