Silabs.com WiseConnect vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Silabs.com WiseConnect: 6 record(s), with affected versions and fixes.
CVE-2026-65936
Medium · 5.3
CWE-126 Aug 13, 2026
RS9116W/SiWx917 malformed packet with increased length field causes memory leak
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
See vulnerability B-E4 in the related paper below.
CVE-2026-65935
High · 7.6
CWE-305 Aug 13, 2026
Bypassing passkey entry in legacy pairing
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.
See vulnerability B-E3 in the related paper below.
CVE-2026-19293
High · 8.8
CWE-521 Aug 13, 2026
SMP security request
SMP security request (from peripheral) does not include the maximum
encryption key size supported. Using a key with less than the maximum keysize
makes brute-forcing the key easier. See V6 in BLERP paper linked below.
CVE-2026-19292
High · 8.8
CWE-305 Aug 13, 2026
Bluetooth re-pairing with legitimate device can use lower security level
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.
CVE-2026-19291
High · 8.8
CWE-290 Aug 13, 2026
Bluetooth re-pairing can use a lower security level than previous
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below.
CVE-2026-16101
High · 8.8
CWE-290 Aug 13, 2026
forced re-pairing with already bonded device
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below