CVE Catalog

CVE-2023-3110

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.37%

29th percentile - higher than 29% of all known CVEs

Summary

A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the device, posing a significant threat to the security of the Z-Wave network.

Recommendation

It is recommended to update to the latest version of SiLabs Unify Gateway to mitigate this vulnerability.

Original NVD description (English source)

Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS