CVE-2025-14972mediumCWE-331

CVE-2025-14972: falha de média gravidade em silabs.com Simplicity SDK

Insufficient DPA countermeasure reseeding

Publicada em

Seguir esta CVE+ Monitorar Simplicity SDK

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.1epss 0.1%
* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability.
CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
silabs.com · Simplicity SDK
CVEs relacionadas — silabs.com Simplicity SDK

No mesmo produto, das mais perigosas para as menos.

CVE-2025-14547LOWECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIsEPSS 0.3%CVE-2025-8414CRITICALZigbee Green Power Host Buffer Overflow VulnerabilityEPSS 0.3%CVE-2024-6350MEDIUMEmberZNet malformed MAC layer packet leads to denial of serviceEPSS 0.3%CVE-2026-8676HIGHCVE-2026-8676EPSS 0.2%CVE-2025-7432LOWDPA countermeasures not reseeded under certain conditionsEPSS 0.2%CVE-2026-4930HIGHDPA Countermeasures weakening on Series 3 devicesEPSS 0.1%