CVE-2025-7432: falha de baixa gravidade em silabs.com Simplicity SDK
DPA countermeasures not reseeded under certain conditions
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 1epss 0.2%
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.
This may allow an attacker to eventually extract secret keys through a DPA attack.
CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
silabs.com · Simplicity SDKCVEs relacionadas — silabs.com Simplicity SDK
No mesmo produto, das mais perigosas para as menos.
CVE-2025-14547LOWECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIsEPSS 0.3%CVE-2024-6350MEDIUMEmberZNet malformed MAC layer packet leads to denial of serviceEPSS 0.3%CVE-2025-8414CRITICALZigbee Green Power Host Buffer Overflow VulnerabilityEPSS 0.3%CVE-2026-8676HIGHCVE-2026-8676EPSS 0.2%CVE-2025-14972MEDIUMInsufficient DPA countermeasure reseedingEPSS 0.1%CVE-2026-4930HIGHDPA Countermeasures weakening on Series 3 devicesEPSS 0.1%
Referências
https://community.silabs.com/068Vm00000b9fBW