CVE Vulnerabilities

CVE-2023-2747

Use of Uninitialized Resource

Published: Jun 15, 2023 | Modified: Jun 30, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized. 

Weakness

The product uses or accesses a resource that has not been initialized.

Affected Software

Name Vendor Start Version End Version
Gecko_software_development_kit Silabs 2.0.0 (including) 2.2.1 (excluding)

Potential Mitigations

References