CVE-2024-22473

7.5 highEPSS 0.4%

High (7.5) in silabs gecko software development kit. EPSS 0.4% chance of exploitation in the next 30 days.

TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWEs: CWE-331, CWE-1279
Published: 2024-02-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

silabs:gecko_software_development_kit

References

https://community.silabs.com/068Vm000001FrjT
https://community.silabs.com/068Vm000001FrjT

Check your stack JSON