Vulnerabilidades do Silabs.com WiseConnect
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Silabs.com WiseConnect: 6 registro(s), com versões afetadas e correções.
CVE-2026-65936
Média · 5.3
CWE-126 13/08/2026
RS9116W/SiWx917 malformed packet with increased length field causes memory leak
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
See vulnerability B-E4 in the related paper below.
CVE-2026-65935
Alta · 7.6
CWE-305 13/08/2026
Bypassing passkey entry in legacy pairing
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.
See vulnerability B-E3 in the related paper below.
CVE-2026-19293
Alta · 8.8
CWE-521 13/08/2026
SMP security request
SMP security request (from peripheral) does not include the maximum
encryption key size supported. Using a key with less than the maximum keysize
makes brute-forcing the key easier. See V6 in BLERP paper linked below.
CVE-2026-19292
Alta · 8.8
CWE-305 13/08/2026
Bluetooth re-pairing with legitimate device can use lower security level
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.
CVE-2026-19291
Alta · 8.8
CWE-290 13/08/2026
Bluetooth re-pairing can use a lower security level than previous
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below.
CVE-2026-16101
Alta · 8.8
CWE-290 13/08/2026
forced re-pairing with already bonded device
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below