CVE-2023-0971 — Command Authentication Bypass in Z/IP Gateway

CVE-2023-0971

Command Authentication Bypass in Z/IP Gateway PUBLISHED

Description (CNA)

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.

Affected (CNA)

Vendor / product	Versions
Silicon Labs / Z/IP Gateway	unaffected 7.18.03

CWE

CWE-863, CWE-268

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1

ADP enrichment

CVE

No English description supplied.

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000V6HZzQAN?operationContext=S1

CISA-ADP

No English description supplied.

No references supplied.