# CVE-2023-41094

## Summary

- **CVE ID:** CVE-2023-41094
- **Severity:** CRITICAL
- **CVSS Score:** 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
- **CWE:** CWE-940
- **Published:** Oct 4, 2023
- **Last Modified:** Mar 13, 2026

## Description

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration

This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected

## Affected Products

- Silicon Labs — Ember ZNet (7.1.3)
- Silicon Labs — Ember ZNet (7.2.0)
- Silicon Labs — Ember ZNet (7.3.0)

## References

- [CNA](https://community.silabs.com/0688Y00000aIPzL)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.08%
- **EPSS Percentile:** 23.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._