CVE-2023-2747
15.06.2023, 20:15
The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.
| Vendor | Product | Version |
|---|---|---|
| silabs | gecko_software_development_kit | 2.0.0 ≤ 𝑥 < 2.2.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-1204 - Generation of Weak Initialization Vector (IV)The product uses a cryptographic primitive that uses an Initialization Vector (IV), but the product does not generate IVs that are sufficiently unpredictable or unique according to the expected cryptographic requirements for that primitive.
- CWE-908 - Use of Uninitialized ResourceThe software uses or accesses a resource that has not been initialized.
References