CVE Intelligence

Vulnerabilidades do Silabs.com Simplicity SDK

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Silabs.com Simplicity SDK: 6 registro(s), com versões afetadas e correções.

CVE-2026-4930 Alta · 7.1 CWE-331 25/06/2026
DPA Countermeasures weakening on Series 3 devices
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing certain seed values if an attacker gains code execution capability on the impacted device. * Therefore, the keys loaded on SYMCRYPTO may be more vulnerable to extraction through DPA attacks than intended
CVE-2026-8676 Alta · 8.8 CWE-290 26/05/2026
Authentication Bypass by Spoofing em Silabs.com Simplicity SDK
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
CVE-2025-14972 Média · 4.1 CWE-331 15/05/2026
Insufficient DPA countermeasure reseeding
* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability.
CVE-2025-14547 Baixa · 2.3 CWE-191 20/02/2026
ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
CVE-2025-7432 Baixa · 1.0 CWE-331 09/02/2026
DPA countermeasures not reseeded under certain conditions
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.  This may allow an attacker to eventually extract secret keys through a DPA attack.
CVE-2025-8414 Crítica · 9.4 CWE-20 17/10/2025
Estouro de buffer em aplicações host Zigbee EZSP da Silicon Labs
Devido a validação inadequada de entradas, está presente uma vulnerabilidade de estouro de buffer em Zigbee EZSP Host Applications. Se o buffer transbordar, é possível a corrupção da pilha. Em determinadas condições, isso pode levar à execução arbitrária de código. É necessário acesso a uma chave de rede para explorar esta vulnerabilidade.