CVE-2023-51392— Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-51392
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
Source: NVD (National Vulnerability Database)
Vulnerability Description
Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1240
Source: NVD (National Vulnerability Database)
Vulnerability Title
Silicon Labs EmberZNet 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Silicon Labs EmberZNet是美国芯科科技（Silicon Labs）公司的一个完整的 Zigbee 协议软件包，包含 Silicon Labs Ember 平台上稳健可靠的网状网络应用所需的所有元素。 Silicon Labs EmberZNet v7.2.0版本和v7.4.0版本存在安全漏洞，该漏洞源于不使用集成硬件加密加速器，可能会增加电磁和差分功率分析旁道攻击的风险。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| silabs.com | Ember ZNet SDK | 7.2.0 ~ 7.4.0 | - |
II. Public POCs for CVE-2023-51392
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-51392
请登录查看更多情报信息。
Same Patch Batch · silabs.com · 2024-02-23 · 3 CVEs total
| CVE-2023-51393 | 5.3 MEDIUM | Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer |
| CVE-2023-51394 | 5.3 MEDIUM | Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereferen |
IV. Related Vulnerabilities
Same product: Ember ZNet SDK
- CVE-2024-10106
Ember ZNet buffer overflow in 'packet handoff' plugin - CVE-2024-3043
Zigbee co-ordinator realignment packet may lead to denial of - CVE-2023-51393
Potential DoS due to BusFault and Assert in Ember ZNet legac - CVE-2023-51394
Potential DoS for EFR32xxx parts in high traffic environment - CVE-2023-41096
Keys Stored in Plaintext on Secure Vault High for Silabs Emb
Same vendor: silabs.com
- CVE-2025-11571
Command Execution vulnerability in Simplicity Installer - CVE-2025-14055
Integer underflow in Secure NCP host - CVE-2025-14547
ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA - CVE-2026-0619
Integer Wraparound DoS in Silicon Labs Matter Implementation - CVE-2025-11004
Reflected XSS vulnerability in Simplicity Device Manager too
Same weakness: CWE-1240
- CVE-2025-64647
Multiple Vulnerabilities in IBM Concert Software - CVE-2026-27017
uTLS has a Chrome Parrot Fingerprint Vulnerability due to GR - CVE-2026-22705
RustCrypto: Signatures has timing side-channel in ML-DSA dec - CVE-2025-14505
Elliptic Cryptanalysis vulnerability when `k` has leading ze - CVE-2025-53960
Apache StreamPark: Uses the user’s password as the secret ke
V. Comments for CVE-2023-51392
No comments yet