low3.1
CVE-2023-2747
The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.
Impact
The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silabs | Gecko Software Development Kit | from 2.0.0 before 2.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U2sFvQAJ?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk
- https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U2sFvQAJ?operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk