目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Silicon Labs 厂商漏洞列表 / CVE 中文分析 46

Silicon Labs 厂商相关 46 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Silicon Labs 专注于物联网无线连接芯片及软件解决方案，其嵌入式固件与开发工具链已收录 31 条 CVE。历史漏洞多涉及缓冲区溢出、权限绕过及远程代码执行，常源于固件更新机制或通信协议实现缺陷。值得关注的是，其 Wi-Fi 和蓝牙栈曾曝出关键安全更新，旨在修复底层协议栈中的内存破坏风险，建议用户及时升级固件以缓解潜在攻击面。

上位製品 Silicon Labs: EmberZNet Gecko Platform Gecko OS Z/IP Gateway Simplicity SDK Z-Wave Ember ZNet Z-Wave SDK SiSDK UZB-7 Unify Gateway Gecko Bootloader RS9116 SDK Silicon Labs Matter Github
CVE IDタイトルCVSS深刻度公開日
CVE-2026-6924 Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path — Silicon Labs Matter GithubCWE-336 8.7 High2026-07-23
CVE-2026-6432 Improper bounds validation in EmberZNet SDK — SiSDKCWE-130--2026-06-25
CVE-2026-47154 Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 — EmberZNetCWE-125--2026-06-25
CVE-2026-47153 Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 — EmberZNetCWE-369--2026-06-25
CVE-2026-47152 Level Control Move divide-by-zero in EmberZNet v9.0.2 — EmberZNetCWE-369--2026-06-25
CVE-2026-47151 Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 — EmberZNetCWE-787--2026-06-25
CVE-2026-47150 IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 — EmberZNetCWE-787--2026-06-25
CVE-2026-47149 Door Lock GetUserType invalid table index in EmberZNet v9.0.2 — EmberZNetCWE-125--2026-06-25
CVE-2026-47148 Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 — EmberZNetCWE-125--2026-06-25
CVE-2026-47147 OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 — EmberZNetCWE-125--2026-06-25
CVE-2026-47146 Color Control color-temperature assertion abort in EmberZNet v9.0.2 — EmberZNetCWE-617--2026-06-25
CVE-2026-47145 Color Control hue/saturation assertion abort in EmberZNet v9.0.2 — EmberZNetCWE-617--2026-06-25
CVE-2026-4526 Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 — EmberZNetCWE-125--2026-06-25
CVE-2026-2815 Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys — SiSDKCWE-339--2026-06-25
CVE-2026-3290 Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values — RS9116 SDKCWE-332--2026-05-14
CVE-2025-2838 Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability — Gecko OSCWE-835 6.5AIMediumAI2025-03-26
CVE-2025-2837 Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability — Gecko OSCWE-121 8.8AIHighAI2025-03-26
CVE-2024-9055 DPA Countermeasures need reseeding — Simplicity SDKCWE-331 4.2 Medium2025-03-17
CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI — Simplicity SDKCWE-126 6.5 -2025-03-07
CVE-2024-23937 Silicon Labs Gecko OS Debug Interface Format String — Gecko OSCWE-200 4.3 Medium2025-01-31
CVE-2024-23973 Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow — Gecko OSCWE-120 8.8 High2025-01-30
CVE-2024-24731 Silicon Labs Gecko OS http_download Stack-based Buffer Overflow — Gecko OSCWE-120 7.5 High2025-01-30
CVE-2024-23938 Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability — Gecko OSCWE-121 8.8 High2024-09-28
CVE-2023-41093 Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse — Simplicity SDKCWE-416 3.1 Low2024-07-12
CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow — Z-Wave SDKCWE-120 8.1 High2024-05-07
CVE-2023-51395 Z-Wave S0 Decryption Vulnerability in End Devices — Z-Wave SDKCWE-787 8.8 High2024-03-07
CVE-2023-39541 Weston Embedded uC-TCP-IP 安全漏洞 — Gecko PlatformCWE-126 5.9 Medium2024-02-20
CVE-2023-39540 Weston Embedded uC-TCP-IP 安全漏洞 — Gecko PlatformCWE-126 5.9 Medium2024-02-20
CVE-2023-45318 Weston Embedded uC-HTTP 安全漏洞 — Gecko PlatformCWE-122 10.0 Critical2024-02-20
CVE-2023-24585 Micrium uC-HTTP 缓冲区错误漏洞 — Gecko PlatformCWE-119 7.7 High2023-11-14

本页汇总了 Silicon Labs 厂商截至目前公开的全部 46 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。