Silabs Emberznet SDK vulnerabilities

2 CVEs affecting Silabs Emberznet SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-3043, published 2024-06-27.

More from Silabs.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-3043, published 2024-06-27. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their network identifier (pan ID), leading to a denial of service. This packet type is…
• CVE-2023-41096, published 2023-10-26. Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days. Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored…