Ember ZNet SDK vulnerabilities
4 known vulnerabilities in Ember ZNet SDK from Silabs.com. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Ember ZNet SDK: Inclusion of Functionality from Untrusted Control Sphere
An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their network identifier (pan ID), leading to a denial of service. This packet type is not useful in production and should be used only for PHY quali
- 7.5 High severity
Ember ZNet SDK: NULL Pointer Dereference
High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash.
- 7.5 High severity
Ember ZNet SDK: Allocation of Resources Without Limits or Throttling
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault
- 9.8 Critical severity
Ember ZNet SDK: Use of a Broken or Risky Cryptographic Algorithm
Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.