5.9Mittel
CVE-2025-1221DoS in Zigbee device due to heavy traffic
Beschreibung
A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system (CPCd) due to heavy Zigbee traffic, resulting in a Denial of Service (DoS) attack, Only hard reset will bring the device to normal operation
Schwachstellentyp (CWE):
CWE-667
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| silabs.com | Zigbee | ≤ 4.3.3, 4.4.3 |
Referenzen und Patches
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.4.4.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.2.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf release-notes
- https://community.silabs.com/068Vm00000Sadyn vendor-advisory