← CVE Intelligence

CVE-2023-41094

Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet PUBLISHED

Description (CNA)

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected

Affected (CNA)

Vendor / productVersions
Silicon Labs / Ember ZNetaffected 7.1.3 through 7.1.5; affected 7.2.0 through 7.2.3; unaffected 7.3.0

CWE

CWE-940

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.