CVE-2023-5138

MEDIUM
Published Jan 3, 2024 Modified Nov 21, 2024 CWE-1319 CWE-909

Description

Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.

Is your site exposed to CVE-2023-5138?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.8
MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-1319 CWE-1319
CWE-909 CWE-909

Affected Products

Vendor Product
silabs gecko_software_development_kit

References

Frequently Asked Questions

What is CVE-2023-5138? +
Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B. It has a CVSS v3.1 base score of 6.8 (MEDIUM).
How severe is CVE-2023-5138? +
CVE-2023-5138 has a CVSS v3.1 score of 6.8 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2023-5138? +
CVE-2023-5138 affects products from silabs, specifically: gecko_software_development_kit. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-5138? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-9709

On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor …
CVE-2024-31510 9.8

An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in …
CVE-2025-1566 7.5

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext …
CVE-2023-45318 10.0

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially …
CVE-2023-4280 9.3

An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to …
CVE-2024-50930 8.8

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-5138 — free, no signup required.