Cyber Resilience

CVE-2023-41094

Silabs Emberznet 7.1.3 – 7.1.5

Published
04 October 2023
Modified
21 November 2024
CVSS Score v3.1 10.0
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0057 44th percentile
Risk Priority 74 floored blend · peak EPSS

Summary

CVE-2023-41094 is a critical-severity Improper Verification of Source of a Communication Channel (CWE-940) vulnerability in Silabs Emberznet. Its CVSS base score is 10.0 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique ARP Cache Poisoning (T1557.002); ranked at the 44th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration…

more

This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1557.002 ARP Cache Poisoning Credential Access
Adversaries may poison Address Resolution Protocol (ARP) caches to position themselves between the communication of two or more networked devices.
T1557 Adversary-in-the-Middle Credential Access
Adversaries may attempt to position themselves between two or more networked devices using an adversary-in-the-middle (AiTM) technique to support follow-on behaviors such as [Network Sniffing](https://attack.
T1557.001 Name Resolution Poisoning and SMB Relay Credential Access
By responding to LLMNR/NBT-NS/mDNS network traffic, adversaries may spoof an authoritative source for name resolution to force communication with an adversary controlled system.
T1557.003 DHCP Spoofing Credential Access
Adversaries may redirect network traffic to adversary-owned systems by spoofing Dynamic Host Configuration Protocol (DHCP) traffic and acting as a malicious DHCP server on the victim network.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-47148Same product: Silabs Emberznet
CVE-2026-47149Same product: Silabs Emberznet
CVE-2026-47154Same product: Silabs Emberznet
CVE-2026-4526Same product: Silabs Emberznet
CVE-2026-47147Same product: Silabs Emberznet
CVE-2026-47150Same product: Silabs Emberznet
CVE-2026-47151Same product: Silabs Emberznet
CVE-2023-51393Same product: Silabs Emberznet
CVE-2026-47152Same product: Silabs Emberznet
CVE-2026-47153Same product: Silabs Emberznet

Affected Assets

silabs
emberznet
7.1.3 — 7.1.5 · 7.2.0 — 7.2.3

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)
  • 1 hardening rule · 1 OS baseline
Validate
Prove the fix (OWASP ASVS)
  • V3.5.3
  • V10.6.2
  • V15.2.4

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-940

Enforces verification of the source of a communication channel by requiring identification and authentication of services first.

addresses: CWE-772

Ensures network resources are released once the session ends or becomes inactive, closing the window for missing-release weaknesses.

addresses: CWE-940

Requires explicit verification of the source and integrity of the channel used for authentication and other security functions.

addresses: CWE-940

Provides the means to verify the source of name-resolution responses instead of relying on unauthenticated channels.

addresses: CWE-940

Requires explicit verification of the communication source, blocking session hijacking via spoofed or alternate channels.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-03 full match
prevents

Authentication of users/services/hardware directly enforces source verification for communication channels.

ID.AM-08 mostly match
prevents

Lifecycle management explicitly requires handling resources through end-of-life including release.

PR.AA-04 mostly match
prevents

Verifying identity assertions prevents spoofed channel origins but does not cover all channel-establishment scenarios.

PR.AA-05 mostly match
prevents

Enforcing managed authorizations and revocations directly prevents post-release operations on credentials or entitlements.

PR.PS-06 mostly match
prevents

Secure development practices eliminate the root coding flaw that permits use-after-release.

DE.CM-09 partial match
prevents

Runtime monitoring may surface resource-exhaustion symptoms but does not address release logic.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

degrades

Explicit information-deletion requirements directly address timely release of resources after use.

finds

Security testing can detect use-after-release but does not prevent it at runtime.

prevents

Secure authentication mechanisms verify the identity and origin of communication channel initiators.

degrades

Network security controls enforce source verification and channel authentication for incoming communications.

degrades

Security of network services includes validating the origin of service requests and connections.

mitigates

Network segregation limits exposure but does not directly verify source of individual channels.

References