Vulnerabilidades de Silabs.com
CVEs publicadas que afetam produtos de Silabs.com: 18 registro(s), com severidade, exploração e correções.
Simplicity SDK 6Gecko SDK 3Simplicity Device Manager 1Silicon Labs Matter 1Simplicity SDK, Gecko SDK 1Simplicity Studio v5 1Simplicity Installer tool (Silicon Labs Tool - SLT) for Simplicity Studio v6 1Simplicity Studio V6 1Silicon Labs Zigbee Stack 1EmberZNet SDK 1Z-Wave Protocol Controller 1Silicon Labs Z-Wave SDK 1RS9116W 1EmberZNet 1
CVE-2026-4930
Alta · 7.1
CWE-331 25/06/2026
DPA Countermeasures weakening on Series 3 devices
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing).
DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing certain seed values if an attacker gains code execution capability on the impacted device.
* Therefore, the keys loaded on SYMCRYPTO may be more vulnerable to extraction through DPA attacks than intended
CVE-2026-8676
Alta · 8.8
CWE-290 26/05/2026
Authentication Bypass by Spoofing em Silabs.com Simplicity SDK
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
CVE-2025-14972
Média · 4.1
CWE-331 15/05/2026
Insufficient DPA countermeasure reseeding
* Countermeasures for DPA within SYMCRYPTO
engine on SixG301xxx devices are not sufficiently random and will
eventually repeat.
* KSU keys using SYMCRYPTO will be
impacted by this vulnerability.
CVE-2025-11571
Baixa · 2.1
CWE-78 24/03/2026
Command Execution vulnerability in Simplicity Installer
Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass parameters or arguments.
To successfully execute this attack, the attacker needs to be on the same network.
CVE-2025-14547
Baixa · 2.3
CWE-191 20/02/2026
ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service.
CVE-2025-14055
Baixa · 2.4
CWE-125 20/02/2026
Integer underflow in Secure NCP host
An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a specially crafted packet.
CVE-2026-0619
Média · 6.0
CWE-190 12/02/2026
Integer Wraparound DoS in Silicon Labs Matter Implementation
A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to trigger a denial of service. A hard reset is required to recover the device.
CVE-2025-11004
Alta · 7.5
CWE-79 10/02/2026
Reflected XSS vulnerability in Simplicity Device Manager tool
The Simplicity Device Manager Tool has a Reflected XSS (Cross-site-scripting) vulnerability in several API endpoints. The attacker needs to be on the same network to execute this attack. These APIs can affect confidentiality, integrity, and availability of the system that has Simplicity Device Manager tool running in the background.
CVE-2025-7432
Baixa · 1.0
CWE-331 09/02/2026
DPA countermeasures not reseeded under certain conditions
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.
This may allow an attacker to eventually extract secret keys through a DPA attack.
CVE-2025-12131
Média · 6.5
CWE-617 05/02/2026
Truncated 802.15.4 packet leads to denial of service
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
CVE-2025-7964
Crítica · 9.2
CWE-229 30/01/2026
Roteador Zigbee da Silicon Labs em Estado Não Reingressável via Requisição MAC 802.15.4 Malformada
Após o recebimento de uma 'malformed 802.15.4 MAC Data Request' (requisição de dados MAC 802.15.4 malformada), o Zigbee Coordinator envia uma requisição de 'network leave' ao roteador Zigbee, fazendo com que o roteador Zigbee fique preso em um estado não reingressável. Se um pai adequado não estiver disponível, os dispositivos finais não conseguirão reingressar. É necessário um recomissionamento manual para recuperar o roteador Zigbee.
CVE-2025-10933
Média · 5.3
CWE-125 05/01/2026
Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read
An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads.
CVE-2025-12986
Média · 6.0
CWE-410 04/12/2025
Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset.
CVE-2025-10285
Alta · 7.4
CWE-200 04/12/2025
Simplcity Device Manager exposes NTLMv2 hash
The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password.
CVE-2025-4321
Alta · 7.1
CWE-240 17/11/2025
DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets
In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation
CVE-2025-10693
Alta · 7.6
CWE-757 31/10/2025
Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1.
CVE-2025-8414
Crítica · 9.4
CWE-20 17/10/2025
Estouro de buffer em aplicações host Zigbee EZSP da Silicon Labs
Devido a validação inadequada de entradas, está presente uma vulnerabilidade de estouro de buffer em Zigbee EZSP Host Applications. Se o buffer transbordar, é possível a corrupção da pilha. Em determinadas condições, isso pode levar à execução arbitrária de código. É necessário acesso a uma chave de rede para explorar esta vulnerabilidade.
CVE-2024-7322
Média · 5.8
CWE-940 15/01/2025
Dos in ZigBee device due to unsolicited encrypted rejoin response
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established