Z/IP Gateway vulnerabilities

2 known vulnerabilities in Z/IP Gateway from Silicon Labs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Z/IP Gateway: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2023-0972Jun 21, 2023Silicon Labs

  Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

• 8.8 High severity

  Z/IP Gateway: Incorrect Authorization

  CVE-2023-0971Jun 21, 2023Silicon Labs

  A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.