This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-4489 | BDVDB-2026-219293 Detail

silabs.comZ/IP Gateway SDK

Description#

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction and unauthorized S0 network access.

Impact#

CAPEC-59 Session Credential Falsification through Prediction

Weaknesses#

  • CWE-1279 Cryptographic Operations are run Before Supporting Units are Ready

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.