CVE-2023-4489 | BDVDB-2026-219293 Detail
silabs.comZ/IP Gateway SDK
Description#
The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access.
Impact#
CAPEC-59 Session Credential Falsification through Prediction
Weaknesses#
- CWE-1279 Cryptographic Operations are run Before Supporting Units are Ready
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.