7.4High
CVE-2025-10285Simplcity Device Manager exposes NTLMv2 hash
Description
The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password.
Weakness (CWE):
CWE-200
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| silabs.com | Simplicity Studio V6 | < 0.100.18 |
References and patches
- https://community.silabs.com/a45Vm0000003UcfIAE vendor-advisory