Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-41094

Опубликовано: 04 окт. 2023
Источник: nvd
CVSS3: 10
CVSS3: 9.8
EPSS Низкий

Описание

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration

This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:silabs:emberznet:*:*:*:*:*:*:*:*
Версия от 7.1.3 (включая) до 7.1.5 (включая)
cpe:2.3:a:silabs:emberznet:*:*:*:*:*:*:*:*
Версия от 7.2.0 (включая) до 7.2.3 (включая)

EPSS

Процентиль: 24%
0.00081
Низкий

10 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-940
CWE-672

Связанные уязвимости

CVSS3: 10
github
больше 2 лет назад

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected

EPSS

Процентиль: 24%
0.00081
Низкий

10 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-940
CWE-672