CVE-2023-41094
Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration
This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected
Los paquetes TouchLink procesados después del tiempo de espera o fuera del alcance debido a la operación de un recurso después de la caducidad y la falta de liberación del recurso después de la vida útil efectiva pueden permitir que se agregue un dispositivo fuera del alcance válido de TouchLink o de la duración del emparejamiento. Este problema afecta a Ember ZNet 7.1.x desde 7.1 .3 a 7.1.5; 7.2.x desde 7.2.0 hasta 7.2.3; La versión 7.3 y posteriores no se ven afectadas
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2023-08-23 CVE Reserved
- 2023-10-04 CVE Published
- 2024-09-26 CVE Updated
- 2024-11-05 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-672: Operation on a Resource after Expiration or Release
- CWE-772: Missing Release of Resource after Effective Lifetime
- CWE-940: Improper Verification of Source of a Communication Channel
CAPEC
- CAPEC-115: Authentication Bypass
- CAPEC-629: DEPRECATED: Unauthorized Use of Device Resources
References (0)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Silabs Search vendor "Silabs" | Emberznet Search vendor "Silabs" for product "Emberznet" | >= 7.1.3 <= 7.1.5 Search vendor "Silabs" for product "Emberznet" and version " >= 7.1.3 <= 7.1.5" | - |
Affected
| ||||||
Silabs Search vendor "Silabs" | Emberznet Search vendor "Silabs" for product "Emberznet" | >= 7.2.0 <= 7.2.3 Search vendor "Silabs" for product "Emberznet" and version " >= 7.2.0 <= 7.2.3" | - |
Affected
|