Approved changes feed: RSS · Atom

cpe:2.3:a:silabs.com:simplicity_sdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSilabs.Com (52225443-b468-5192-880f-63993491f517)
ProductSimplicity Sdk (21480199-d80b-5ba0-b583-8dada8b8a65b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4930 vulnerable 2026-07-29 00:57:47.367644 DPA Countermeasures weakening on Series 3 devices
SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing certain seed values if an attacker gains code execution capability on the impacted device. * Therefore, the keys loaded on SYMCRYPTO may be more vulnerable to extraction through DPA attacks than intended
Published: 2026-06-25T18:39:26.379Z
Updated: 2026-06-25T19:03:41.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8676 vulnerable 2026-06-08 08:08:58.531989 Details available
HIGH (8.8)
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
Published: 2026-05-26T19:36:53.947Z
Updated: 2026-05-26T20:47:58.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8414 vulnerable 2026-06-08 07:45:20.106021 Zigbee Green Power Host Buffer Overflow Vulnerability
Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
Published: 2025-10-17T16:02:55.583Z
Updated: 2025-10-17T17:20:32.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7432 vulnerable 2026-06-08 07:43:18.596679 DPA countermeasures not reseeded under certain conditions
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions.  This may allow an attacker to eventually extract secret keys through a DPA attack.
Published: 2026-02-09T16:07:54.943Z
Updated: 2026-02-09T16:23:54.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14972 vulnerable 2026-06-08 07:06:35.455688 Insufficient DPA countermeasure reseeding
* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability.
Published: 2026-05-15T14:35:09.434Z
Updated: 2026-05-15T15:40:29.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14547 vulnerable 2026-06-08 07:06:34.665280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12131 vulnerable 2026-06-08 07:04:29.734847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6350 vulnerable 2026-06-08 06:58:18.730021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.