Browse CVEs

HIGH 8.8 CVE-2025-2837 Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjace… Gecko Os Mitigation only Fix from $1,9502025-03-26 MEDIUM 6.5 CVE-2025-2838 Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to … Gecko Os Mitigation only Fix from $1,6002025-03-26 HIGH 8.8 CVE-2024-23973 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is … Gecko Os Mitigation only Fix from $1,9502025-01-31 HIGH 8.8 CVE-2024-24731 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is … Gecko Os Mitigation only Fix from $1,9502025-01-31 HIGH 8.8 CVE-2024-50930 An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code. Z Wave Software Development Kit No fix yet Fix from $1,9502024-12-10 HIGH 8.8 CVE-2024-23938 Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent att… Gecko Os Mitigation only Fix from $1,9502024-09-28 CRITICAL 9.8 CVE-2023-45318 A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted… Gecko Software Development Kit No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2023-31247 A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafte… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-27882 A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially cra… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-28379 A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted netw… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-28391 A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted netwo… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-24585 An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet … Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-25181 A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of ne… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2020-27630 In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random. Uc\/tcp Ip Mitigation only Fix from $2,3002023-10-10 MEDIUM 6.5 CVE-2023-0775 An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection … Gecko Software Development Kit Mitigation only Fix from $1,6002023-03-28 MEDIUM 6.5 CVE-2022-24939  A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to … Gecko Software Development Kit Mitigation only Fix from $1,6002022-11-18 CRITICAL 9.8 CVE-2022-24942 Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTTP request. Micrium Uc Http No fix yet Fix from $2,3002022-11-15 CRITICAL 9.8 CVE-2022-24937 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers. Emberznet No fix yet Fix from $2,3002022-11-14 HIGH 7.5 CVE-2022-24938 A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error. Emberznet Mitigation only Fix from $1,9502022-11-14 MEDIUM 6.5 CVE-2022-24611 Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 prot… Zm5202 Firmware Mitigation only Fix from $1,6002022-05-17 HIGH 8.3 CVE-2013-20003 Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an at… Zgm130s037hgn Firmware No fix yet Fix from $1,9502022-02-04 HIGH 8.1 CVE-2018-25029 The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range du… Zgm130s037hgn Firmware No fix yet Fix from $1,9502022-02-04 HIGH 8.1 CVE-2020-9058 Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3… 500 Series Firmware Mitigation only Fix from $1,9502022-01-10 MEDIUM 6.5 CVE-2020-9059 Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to batt… 500 Series Firmware Mitigation only Fix from $1,6002022-01-10 MEDIUM 6.5 CVE-2020-9060 Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 versio… 500 Series Firmware Mitigation only Fix from $1,6002022-01-10 MEDIUM 6.5 CVE-2020-10137 Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a rem… Uzb 7 Mitigation only Fix from $1,6002022-01-10 HIGH 7.5 CVE-2020-13582 A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to de… Micrium Uc Http No fix yet Fix from $1,9502021-01-26 MEDIUM 6.5 CVE-2018-19983 An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares a Z-Wave frame-transmission program (e.g., Z-Wave PC… Z Wave S0 Firmware Mitigation only Fix from $1,6002018-12-09