CVE-2023-41096 — Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices

CVE-2023-41096

Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices PUBLISHED

Description (CNA)

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.

Affected (CNA)

Vendor / product	Versions
silabs.com / Ember ZNet SDK	unaffected 7.3.2

CWE

CWE-312

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

ADP enrichment

CVE

No English description supplied.

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

CISA-ADP

No English description supplied.

No references supplied.