CVE-2023-41095 — Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices

CVE-2023-41095

Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices PUBLISHED

Description (CNA)

Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs OpenThread SDK: 2.3.1 and earlier.

Affected (CNA)

Vendor / product	Versions
silabs.com / OpenThread SDK	unaffected 2.3.2

CWE

CWE-312

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

ADP enrichment

CVE

No English description supplied.

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

CISA-ADP

No English description supplied.

No references supplied.