Description (CNA)
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Silicon Labs / Connect SDK | affected 4.0.0 through 4.3.1; affected 0 through 3.7.7 |
CWE
CWE-940
References
- https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000588.md
- https://github.com/SiliconLabsSoftware/sisdk-release/
ADP enrichment
No English description supplied.
No references supplied.