What’s Vulnerable › Vulnerabilities

CVE-2023-41095: Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-26 · updated 2026-06-17
• Weakness: CWE-312

Description

Missing Encryption of Security Keys vulnerability in Silicon Labs OpenThread SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs OpenThread SDK: 2.3.1 and earlier.

Affected products

• silabs.com OpenThread SDK: through 2.3.1.0

References

• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

Get alerted when CVE-2023-41095 or the next vulnerability affects your stack