CVE-2023-51395: Z-Wave S0 Decryption Vulnerability in End Devices
The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51395?
CVE-2023-51395 is considered a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2023-51395?
To fix CVE-2023-51395, update the affected Silicon Labs Z-Wave end devices to the latest firmware version that addresses this vulnerability.
Who is affected by CVE-2023-51395?
CVE-2023-51395 affects users of Silicon Labs Z-Wave end devices, particularly those with older firmware versions.
What type of attack does CVE-2023-51395 allow?
CVE-2023-51395 allows an unauthenticated attacker within Z-Wave range to potentially execute arbitrary code on the device.
What devices are impacted by CVE-2023-51395?
Devices impacted by CVE-2023-51395 include the Silicon Labs Z-Wave Series 500 end devices.