CVE-2023-2683— Connection update while closing connection may lead to denial-of-service
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-2683
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Connection update while closing connection may lead to denial-of-service
Source: NVD (National Vulnerability Database)
Vulnerability Description
A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Silicon Labs EFR32 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Silicon Labs EFR32是美国芯科科技（Silicon Labs）公司的一系列 SoC 无线组件。 Silicon Labs EFR32 Bluetooth LE stack 5.1.0版本至5.1.1版本存在安全漏洞。攻击者利用该漏洞发送无效的配对消息，从而导致合法的连接尝试失败。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| silabs.com | Bluetooth SDK | 5.0.0 ~ v5.1.1 | - |
II. Public POCs for CVE-2023-2683
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-2683
请登录查看更多情报信息。
Same Patch Batch · silabs.com · 2023-06-15 · 3 CVEs total
| CVE-2023-2686 | 9.8 CRITICAL | Silicon Labs Gecko SDK 安全漏洞 |
| CVE-2023-2747 | 3.1 LOW | Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data |
IV. Related Vulnerabilities
Same vendor: silabs.com
- CVE-2025-11571
Command Execution vulnerability in Simplicity Installer - CVE-2025-14055
Integer underflow in Secure NCP host - CVE-2025-14547
ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA - CVE-2026-0619
Integer Wraparound DoS in Silicon Labs Matter Implementation - CVE-2025-11004
Reflected XSS vulnerability in Simplicity Device Manager too
Same weakness: CWE-401
- CVE-2026-43506
Prosody 安全漏洞 - CVE-2026-7379
Missing Release of Memory after Effective Lifetime in Wiresh - CVE-2026-40336
libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondar - CVE-2026-33775
Junos OS: MX Series: Mismatch between configured and receive - CVE-2026-33782
Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd mem
V. Comments for CVE-2023-2683
No comments yet