What’s Vulnerable › Vulnerabilities

CVE-2023-41096: Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-26 · updated 2026-06-17
• Weakness: CWE-312

Description

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM (SecureVault High modules) allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier.

Affected products

• silabs.com EmberZNet SDK: through 7.3.1.0

References

• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ZkKh7QAF?operationContext=S1

Get alerted when CVE-2023-41096 or the next vulnerability affects your stack