Silabs.com vulnerabilities
Published CVEs affecting Silabs.com products: 18 record(s), with severity, exploitation and fixes.
Simplicity SDK 6Gecko SDK 3Simplicity Device Manager 1Silicon Labs Matter 1Simplicity SDK, Gecko SDK 1Simplicity Studio v5 1Simplicity Installer tool (Silicon Labs Tool - SLT) for Simplicity Studio v6 1Simplicity Studio V6 1Silicon Labs Zigbee Stack 1EmberZNet SDK 1Z-Wave Protocol Controller 1Silicon Labs Z-Wave SDK 1RS9116W 1EmberZNet 1
CVE-2026-4930
High · 7.1
CWE-331 Jun 25, 2026
DPA Countermeasures weakening on Series 3 devices
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing).
DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing certain seed values if an attacker gains code execution capability on the impacted device.
* Therefore, the keys loaded on SYMCRYPTO may be more vulnerable to extraction through DPA attacks than intended
CVE-2026-8676
High · 8.8
CWE-290 May 26, 2026
Authentication Bypass by Spoofing in Silabs.com Simplicity SDK
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
CVE-2025-14972
Medium · 4.1
CWE-331 May 15, 2026
Insufficient DPA countermeasure reseeding
* Countermeasures for DPA within SYMCRYPTO
engine on SixG301xxx devices are not sufficiently random and will
eventually repeat.
* KSU keys using SYMCRYPTO will be
impacted by this vulnerability.
CVE-2025-11571
Low · 2.1
CWE-78 Mar 24, 2026
Command Execution vulnerability in Simplicity Installer
Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass parameters or arguments.
To successfully execute this attack, the attacker needs to be on the same network.
CVE-2025-14547
Low · 2.3
CWE-191 Feb 20, 2026
ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
CVE-2025-14055
Low · 2.4
CWE-125 Feb 20, 2026
Integer underflow in Secure NCP host
An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.
CVE-2026-0619
Medium · 6.0
CWE-190 Feb 12, 2026
Integer Wraparound DoS in Silicon Labs Matter Implementation
A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to trigger a denial of service. A hard reset is required to recover the device.
CVE-2025-11004
High · 7.5
CWE-79 Feb 10, 2026
Reflected XSS vulnerability in Simplicity Device Manager tool
The Simplicity Device Manager Tool has a Reflected XSS (Cross-site-scripting) vulnerability in several API endpoints. The attacker needs to be on the same network to execute this attack. These APIs can affect confidentiality, integrity, and availability of the system that has Simplicity Device Manager tool running in the background.
CVE-2025-7432
Low · 1.0
CWE-331 Feb 9, 2026
DPA countermeasures not reseeded under certain conditions
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.
This may allow an attacker to eventually extract secret keys through a DPA attack.
CVE-2025-12131
Medium · 6.5
CWE-617 Feb 5, 2026
Truncated 802.15.4 packet leads to denial of service
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
CVE-2025-7964
Critical · 9.2
CWE-229 Jan 30, 2026
Silicon Labs Zigbee Router Non-Rejoinable State via Malformed 802.15.4 MAC Request
After receiving a
malformed 802.15.4 MAC Data Request
the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.
CVE-2025-10933
Medium · 5.3
CWE-125 Jan 5, 2026
Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read
An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads.
CVE-2025-12986
Medium · 6.0
CWE-410 Dec 4, 2025
Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset.
CVE-2025-10285
High · 7.4
CWE-200 Dec 4, 2025
Simplcity Device Manager exposes NTLMv2 hash
The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password.
CVE-2025-4321
High · 7.1
CWE-240 Nov 17, 2025
DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets
In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation
CVE-2025-10693
High · 7.6
CWE-757 Oct 31, 2025
Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1.
CVE-2025-8414
Critical · 9.4
CWE-20 Oct 17, 2025
Silicon Labs Zigbee EZSP Host Applications Buffer Overflow
Due to improper input validation, a buffer overflow vulnerability is present in
Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain
conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
CVE-2024-7322
Medium · 5.8
CWE-940 Jan 15, 2025
Dos in ZigBee device due to unsolicited encrypted rejoin response
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established