Z/ip Gateway SDK vulnerabilities
3 known vulnerabilities in Z/ip Gateway SDK from Silabs. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Z/IP Gateway SDK: Uncaught Exception
Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.
- 8.8 High severity
Z/IP Gateway: Improper Restriction of Operations within the Bounds of a Memory Buffer
Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
- 8.8 High severity
Z/IP Gateway: Incorrect Authorization
A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.