5.9Media
CVE-2025-1221DoS in Zigbee device due to heavy traffic
Descripción
A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system (CPCd) due to heavy Zigbee traffic, resulting in a Denial of Service (DoS) attack, Only hard reset will bring the device to normal operation
Debilidad (CWE):
CWE-667
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| silabs.com | Zigbee | ≤ 4.3.3, 4.4.3 |
Referencias y parches
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.4.4.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.2.0.pdf release-notes
- https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf release-notes
- https://community.silabs.com/068Vm00000Sadyn vendor-advisory