CVE-2023-0971

Summary

CVE-2023-0971 is a logic error affecting the SiLabs Z/IP Gateway SDK 7.18.02 and prior versions. This vulnerability enables an attacker to bypass authentication, gaining unauthorized access to Z-Wave controllers. Furthermore, it permits remote administration of these controllers, posing a significant security risk. Additionally, S0/S2 encryption keys can be recovered, compromising data protection. This issue may lead to unauthorized control and potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.