What is the severity of CVE-2023-51393?

CVE-2023-51393 has a medium severity due to the potential for an uncontrolled resource consumption vulnerability that can crash the device.

How do I fix CVE-2023-51393?

To fix CVE-2023-51393, upgrade to Silicon Labs Ember ZNet SDK version 7.4.0.0 or later, or Silicon Labs Gecko SDK version 4.4.0 or later.

What systems are affected by CVE-2023-51393?

CVE-2023-51393 affects Silicon Labs Ember ZNet SDK versions prior to 7.4.0.0 and Gecko SDK versions prior to 4.4.0.

What kind of attack can be executed using CVE-2023-51393?

An attacker can exploit CVE-2023-51393 to trigger a bus fault and crash the device due to resource allocation without limits.

Is CVE-2023-51393 related to denial of service attacks?

Yes, CVE-2023-51393 can lead to denial of service conditions by causing the affected devices to crash.

Vulnerability/
CVE-2023-51393

high

7.5

CWE

770

23/2/2024

12/2/2025

CVE-2023-51393: Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer

First published: Fri Feb 23 2024(Updated: )

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network.

Credit: product-security@silabs.com

Affected Software	Affected Version	How to fix
Silicon Labs Ember ZNet SDK	<7.4.0
Silicon Labs Ember ZNet SDK	<7.4.0.0
SiLabs Gecko SDK	<4.4.0

Never miss a vulnerability like this again

Reference Links

https://community.silabs.com/068Vm000001NaAM

Frequently Asked Questions

What is the severity of CVE-2023-51393?
CVE-2023-51393 has a medium severity due to the potential for an uncontrolled resource consumption vulnerability that can crash the device.
How do I fix CVE-2023-51393?
To fix CVE-2023-51393, upgrade to Silicon Labs Ember ZNet SDK version 7.4.0.0 or later, or Silicon Labs Gecko SDK version 4.4.0 or later.
What systems are affected by CVE-2023-51393?
CVE-2023-51393 affects Silicon Labs Ember ZNet SDK versions prior to 7.4.0.0 and Gecko SDK versions prior to 4.4.0.
What kind of attack can be executed using CVE-2023-51393?
An attacker can exploit CVE-2023-51393 to trigger a bus fault and crash the device due to resource allocation without limits.
Is CVE-2023-51393 related to denial of service attacks?
Yes, CVE-2023-51393 can lead to denial of service conditions by causing the affected devices to crash.

agent/title
agent/references
agent/type
agent/first-publish-date
agent/author
collector/mitre-cve
source/MITRE
agent/weakness
agent/description
agent/source
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
agent/severity
agent/event
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup-request
vendor/silabs
canonical/silicon labs ember znet sdk
vendor/silicon labs
canonical/silabs gecko sdk

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.