silabs.com Vulnerabilities and Affected Products
Vulnerabilities associated with Series 2 SoCs and associated modules.
Products
Clear product- GSDK12 vulnerabilities
- Gecko Platform10 vulnerabilities
- Simplicity SDK8 vulnerabilities
- Gecko SDK7 vulnerabilities
- WiseConnect7 vulnerabilities
- Ember ZNet SDK6 vulnerabilities
- BT1223 vulnerabilities
- RS9116 Bluetooth SDK3 vulnerabilities
- SiSDK3 vulnerabilities
- Z/IP Gateway SDK3 vulnerabilities
- Ember ZNet2 vulnerabilities
- Gecko Bootloader2 vulnerabilities
- PC Controller2 vulnerabilities
- Bluetooth SDK1 vulnerability
- Configuration Wizard 21 vulnerability
- CP210 VCP Win 2k1 vulnerability
- CP210x VCP Windows1 vulnerability
- EFR32 BLE SDK1 vulnerability
- EmberZNet1 vulnerability
- Flash Programming Utility1 vulnerability
- OpenThread1 vulnerability
- OpenThread SDK1 vulnerability
- RS9116W1 vulnerability
- SE Firmware1 vulnerability
- Series 2 SoCs and associated modules1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 DevicesDPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected. CWE-1255Apr 29, 2025 | CVSS1.0v4.0 | EPSS0.216% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |