CVE-2024-23937

Summary

CVE-2024-23937 is a vulnerability affecting installations of Silicon Labs Gecko OS. This issue permits network-adjacent attackers to disclose sensitive information without requiring authentication. The root cause is a flaw in the debug interface that fails to validate user-supplied strings properly, exposing them as format specifiers. An attacker can exploit this vulnerability in combination with other weaknesses to execute arbitrary code within the device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.