CVE-2023-4489 Information

Description

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This makes the first S0 key generated at startup predictable potentially allowing network key prediction and unauthorized S0 network access.

Reference

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000buWj0QAE?operationContext=S1 https://github.com/SiliconLabs/gecko_sdk