CVE-2023-0969CWE-125CWE-787

Global read overflow in Z/IP Gateway

Low · published June 21, 2023

CVSS v3.1
3.5
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
Published
2023-06-21T19:40Z
EPSS history
Timeline
  • 21 JUN 19:40Z
    Global read overflow in Z/IP Gateway
    cvelistv5