CVE-2025-56562

HIGH

Signify Wiz Connected 1.9.1 - Unauthenticated Denial of Service via MAC Address

Title source: llm

An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only requiring the MAC address.

Core 4

Core References

Product

Not Applicable

http://wiz.com

Broken Link

Product

CVSS v3 7.5

EPSS 0.0039

EPSS Percentile 30.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

CWE

CWE-306

Status published

Products (1)

signify/wiz_connected 1.9.1

Published Sep 16, 2025

Tracked Since Feb 18, 2026