Z/IP Gateway SDK vulnerabilities

2 known vulnerabilities in Z/IP Gateway SDK from Silabs.com. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Z/IP Gateway SDK: Uncaught Exception

  CVE-2024-3051Apr 26, 2024Silabs.com

  Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.

• 9.8 Critical severity

  Z/IP Gateway SDK: Use of Uninitialized Resource

  CVE-2023-4489Dec 14, 2023Silabs.com

  The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable, potentially allowing network key prediction an