Skip to content
Noroxi

silabs records

102 published records for vendor silabs.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
16
With a fix record
24.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

102 records
  • CVE-2022-24942
    40Plan

    Heap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution

    CriticalCVSS 9.8No exploitEPSS 2%

    silabs · micrium uc-httpNov 15, 2022

  • CVE-2023-27882
    40Plan

    A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 2%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-45318
    40Plan

    A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004.

    CriticalCVSS 9.8No exploitEPSS 2%

    silabs · gecko software development kitFeb 20, 2024

  • CVE-2023-25181
    40Plan

    A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 2%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-28379
    40Plan

    A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 2%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-31247
    40Plan

    A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 2%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-28391
    39Monitor

    A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-24585
    39Monitor

    An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2020-27630
    39Monitor

    In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · uc\/tcp-ipOct 10, 2023

  • CVE-2023-2686
    39Monitor

    Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payloa

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitJun 15, 2023

  • CVE-2022-24937
    39Monitor

    Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · emberznetNov 14, 2022

  • CVE-2023-41094
    39Monitor

    Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · emberznetOct 4, 2023

  • CVE-2023-4489
    39Monitor

    Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · z\/ip gateway sdkDec 14, 2023

  • CVE-2023-4280
    39Monitor

    Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region

    CriticalCVSS 9.8No exploitEPSS 0%

    silabs · gecko software development kitJan 2, 2024

  • CVE-2023-4041
    39Monitor

    Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    silabs · gecko bootloaderAug 23, 2023

  • CVE-2023-51392
    39Monitor

    Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

    CriticalCVSS 9.8No exploitEPSS 0%

    silabs · emberznetFeb 23, 2024

  • CVE-2020-15531
    36Monitor

    Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data.

    HighCVSS 8.8No exploitEPSS 3%

    silabs · bluetooth low energy software development kitAug 19, 2020

  • CVE-2022-24936
    36Monitor

    Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices

    CriticalCVSS 9.1No exploitEPSS 1%

    silabs · gecko bootloaderNov 2, 2022

  • CVE-2023-4020
    36Monitor

    Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory

    CriticalCVSS 9.1No exploitEPSS 1%

    silabs · gecko software development kitDec 15, 2023

  • CVE-2023-41095
    36Monitor

    Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices

    CriticalCVSS 9.1No exploitEPSS 0%

    silabs · openthread sdkOct 26, 2023

  • CVE-2024-23938
    35Monitor

    Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    silabs · gecko osSep 28, 2024

  • CVE-2024-23973
    35Monitor

    Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow

    HighCVSS 8.8No exploitEPSS 1%

    silabs · gecko osJan 30, 2025

  • CVE-2025-2837
    35Monitor

    Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    silabs · gecko osMar 26, 2025

  • CVE-2024-50920
    35Monitor

    Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted

    HighCVSS 8.8No exploitEPSS 0%

    silabs · z-wave software development kitDec 10, 2024

  • CVE-2024-24731
    35Monitor

    Silicon Labs Gecko OS http_download Stack-based Buffer Overflow

    HighCVSS 8.8No exploitEPSS 0%

    silabs · gecko osJan 30, 2025