Vulnerabilidades do Silabs.com Simplicity SDK
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Silabs.com Simplicity SDK: 6 registro(s), com versões afetadas e correções.
CVE-2026-4930
Alta · 7.1
CWE-331 25/06/2026
DPA Countermeasures weakening on Series 3 devices
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing).
DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing certain seed values if an attacker gains code execution capability on the impacted device.
* Therefore, the keys loaded on SYMCRYPTO may be more vulnerable to extraction through DPA attacks than intended
CVE-2026-8676
Alta · 8.8
CWE-290 26/05/2026
Authentication Bypass by Spoofing em Silabs.com Simplicity SDK
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
CVE-2025-14972
Média · 4.1
CWE-331 15/05/2026
Insufficient DPA countermeasure reseeding
* Countermeasures for DPA within SYMCRYPTO
engine on SixG301xxx devices are not sufficiently random and will
eventually repeat.
* KSU keys using SYMCRYPTO will be
impacted by this vulnerability.
CVE-2025-14547
Baixa · 2.3
CWE-191 20/02/2026
ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
CVE-2025-7432
Baixa · 1.0
CWE-331 09/02/2026
DPA countermeasures not reseeded under certain conditions
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.
This may allow an attacker to eventually extract secret keys through a DPA attack.
CVE-2025-8414
Crítica · 9.4
CWE-20 17/10/2025
Estouro de buffer em aplicações host Zigbee EZSP da Silicon Labs
Devido a validação inadequada de entradas, está presente uma vulnerabilidade de estouro de buffer em Zigbee EZSP Host Applications. Se o buffer transbordar, é possível a corrupção da pilha. Em determinadas condições, isso pode levar à execução arbitrária de código. É necessário acesso a uma chave de rede para explorar esta vulnerabilidade.