Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

silabs.com Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-16769`RS9116W/SiWx917 plaintext pause encryption request causes DOS	Exploitation statusNot known exploited	FixYes	Affected productWiseCnnect	Published09/08/2026	SeverityHigh
`CVE-2026-65936`RS9116W/SiWx917 malformed packet with increased length field causes memory leak	Exploitation statusNot known exploited	FixYes	Affected productWiseConnect	Published08/13/2026	SeverityMedium
`CVE-2026-65935`Bypassing passkey entry in legacy pairing	Exploitation statusNot known exploited	FixYes	Affected productWiseConnect	Published08/13/2026	SeverityHigh
`CVE-2026-65934`BT122 plaintext pause encryption request causes DOS	Exploitation statusNot known exploited	FixYes	Affected productBT122	Published08/13/2026	SeverityHigh
`CVE-2026-65933`BT122 malformed packet with increased length field causes memory leak	Exploitation statusNot known exploited	FixYes	Affected productBT122	Published08/13/2026	SeverityMedium
`CVE-2026-65932`BT122 stops advertising	Exploitation statusNot known exploited	FixYes	Affected productBT122	Published08/13/2026	SeverityMedium
`CVE-2026-19293`SMP security request	Exploitation statusNot known exploited	FixYes	Affected productWiseConnect	Published08/13/2026	SeverityHigh
`CVE-2026-19292`Bluetooth re-pairing with legitimate device can use lower security level	Exploitation statusNot known exploited	FixYes	Affected productWiseConnect	Published08/13/2026	SeverityHigh
`CVE-2026-19291`Bluetooth re-pairing can use a lower security level than previous	Exploitation statusNot known exploited	FixYes	Affected productWiseConnect	Published08/13/2026	SeverityHigh
`CVE-2026-16101`forced re-pairing with already bonded device	Exploitation statusNot known exploited	FixYes	Affected productWiseConnect	Published08/13/2026	SeverityHigh
`CVE-2026-4930`DPA Countermeasures weakening on Series 3 devices	Exploitation statusNot known exploited	FixYes	Affected productSimplicity SDK	Published06/25/2026	SeverityHigh
`CVE-2026-8676`	Exploitation statusNot known exploited	FixYes	Affected productSimplicity SDK	Published05/26/2026	SeverityHigh
`CVE-2025-14972`Insufficient DPA countermeasure reseeding	Exploitation statusNot known exploited	FixYes	Affected productSimplicity SDK	Published05/15/2026	SeverityMedium
`CVE-2025-11571`Command Execution vulnerability in Simplicity Installer	Exploitation statusNot known exploited	FixYes	Affected productSimplicity Studio v5	Published03/24/2026	SeverityLow
`CVE-2025-14055`Integer underflow in Secure NCP host	Exploitation statusNot known exploited	FixNot confirmed	Affected productSimplicity SDK, Gecko SDK	Published02/20/2026	SeverityLow
`CVE-2025-14547`ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs	Exploitation statusNot known exploited	FixYes	Affected productSimplicity SDK	Published02/20/2026	SeverityLow
`CVE-2026-0619`Integer Wraparound DoS in Silicon Labs Matter Implementation	Exploitation statusNot known exploited	FixYes	Affected productSilicon Labs Matter	Published02/12/2026	SeverityMedium
`CVE-2025-11004`Reflected XSS vulnerability in Simplicity Device Manager tool	Exploitation statusNot known exploited	FixYes	Affected productSimplicity Device Manager	Published02/10/2026	SeverityHigh
`CVE-2025-7432`DPA countermeasures not reseeded under certain conditions	Exploitation statusNot known exploited	FixYes	Affected productSimplicity SDK	Published02/09/2026	SeverityLow
`CVE-2025-12131`Truncated 802.15.4 packet leads to denial of service	Exploitation statusNot known exploited	FixYes	Affected productEmberZNet SDK	Published02/05/2026	SeverityMedium
`CVE-2025-7964`Zigbee Router Denial of Service	Exploitation statusNot known exploited	FixYes	Affected productSilicon Labs Zigbee Stack	Published01/30/2026	SeverityCritical
`CVE-2025-10933`Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read	Exploitation statusNot known exploited	FixYes	Affected productZ-Wave Protocol Controller	Published01/05/2026	SeverityMedium
`CVE-2025-12986`Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices	Exploitation statusNot known exploited	FixNot confirmed	Affected productGecko SDK	Published12/04/2025	SeverityMedium
`CVE-2025-10285`Simplcity Device Manager exposes NTLMv2 hash	Exploitation statusNot known exploited	FixYes	Affected productSimplicity Studio V6	Published12/04/2025	SeverityHigh
`CVE-2025-4321`DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets	Exploitation statusNot known exploited	FixNot confirmed	Affected productRS9116W	Published11/17/2025	SeverityHigh
`CVE-2025-10693`Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure	Exploitation statusNot known exploited	FixYes	Affected productSilicon Labs Z-Wave SDK	Published10/31/2025	SeverityHigh
`CVE-2025-8414`Zigbee Green Power Host Buffer Overflow Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productSimplicity SDK	Published10/17/2025	SeverityCritical
`CVE-2025-7448`Man in the middle (MitM) attack vulnerability in Wi-SUN library	Exploitation statusNot known exploited	FixNot confirmed	Affected productWi-SUN Stack	Published09/12/2025	SeverityHigh
`CVE-2025-1394`Denial of Service (DoS) vulnerabilitiey in Zigbee library	Exploitation statusNot known exploited	FixYes	Affected productZigbee Stack	Published07/30/2025	SeverityMedium
`CVE-2025-1221`DoS in Zigbee device due to heavy traffic	Exploitation statusNot known exploited	FixYes	Affected productZigbee	Published07/30/2025	SeverityMedium
`CVE-2025-2329`High traffic causes corrupt SPI packets in OpenThread leading to denial of service	Exploitation statusNot known exploited	FixYes	Affected productOpenThread	Published07/25/2025	SeverityMedium
`CVE-2025-3873`Buffer overflow in Si91x crypto APIs	Exploitation statusNot known exploited	FixYes	Affected productWiseConnect	Published07/25/2025	SeverityMedium
`CVE-2025-3301`DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices	Exploitation statusNot known exploited	FixNot confirmed	Affected productSeries 2 SoCs and associated modules	Published04/29/2025	SeverityLow
`CVE-2024-6351`Malformed packet leads to denial of service in NWK/APS layer	Exploitation statusNot known exploited	FixYes	Affected productSiSDK	Published01/28/2025	SeverityMedium
`CVE-2024-9499`Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productUSBXpress Win 98SE Dev Kit	Published01/24/2025	SeverityHigh
`CVE-2024-9498`Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productUSBXpress SDK	Published01/24/2025	SeverityHigh
`CVE-2024-9497`Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productUSBXpress 4 SDK	Published01/24/2025	SeverityHigh
`CVE-2024-9496`Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productUSBXpress Dev Kit	Published01/24/2025	SeverityHigh
`CVE-2024-9495`Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productCP210x VCP Windows	Published01/24/2025	SeverityHigh
`CVE-2024-9494`Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productCP210 VCP Win 2k	Published01/24/2025	SeverityHigh
`CVE-2024-9493`Uncontrolled search path can lead to DLL hijacking in ToolStick installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productToolStick	Published01/24/2025	SeverityHigh
`CVE-2024-9492`Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productFlash Programming Utility	Published01/24/2025	SeverityHigh
`CVE-2024-9491`Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productConfiguration Wizard 2	Published01/24/2025	SeverityHigh
`CVE-2024-9490`Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer	Exploitation statusNot known exploited	FixNot confirmed	Affected productSilicon Labs IDE (8-bit)	Published01/24/2025	SeverityHigh
`CVE-2024-7322`Dos in ZigBee device due to unsolicited encrypted rejoin response	Exploitation statusNot known exploited	FixYes	Affected productEmberZNet	Published01/15/2025	SeverityMedium
`CVE-2024-6352`Malformed packet leads to denial of service in APS layer	Exploitation statusNot known exploited	FixYes	Affected productSiSDK	Published01/13/2025	SeverityMedium
`CVE-2024-10106`Ember ZNet buffer overflow in 'packet handoff' plugin	Exploitation statusNot known exploited	FixYes	Affected productEmber ZNet SDK	Published01/09/2025	SeverityLow
`CVE-2024-6350`EmberZNet malformed MAC layer packet leads to denial of service	Exploitation statusNot known exploited	FixYes	Affected productSimplicity SDK	Published01/08/2025	SeverityMedium
`CVE-2024-8361`DoS caused due to wrong hash length returned for SHA2/224 algorithm	Exploitation statusNot known exploited	FixYes	Affected productWiSeConnect SDK	Published01/07/2025	SeverityHigh
`CVE-2024-7139`Denial of Service in Silicon Labs RS9116 Bluetooth SDK	Exploitation statusNot known exploited	FixYes	Affected productRS9116 Bluetooth SDK	Published12/19/2024	SeverityMedium
`CVE-2024-7138`Denial of Service in Silicon Labs RS9116 Bluetooth SDK	Exploitation statusNot known exploited	FixYes	Affected productRS9116 Bluetooth SDK	Published12/19/2024	SeverityMedium
`CVE-2024-7137`Denial of Service in Silicon Labs RS9116 Bluetooth SDK	Exploitation statusNot known exploited	FixYes	Affected productRS9116 Bluetooth SDK	Published12/19/2024	SeverityMedium
`CVE-2024-6657`BLE peripheral DoS after few cycles of connect/disconnects	Exploitation statusNot known exploited	FixYes	Affected productEFR32 BLE SDK	Published10/11/2024	SeverityMedium
`CVE-2024-2502`Failure to update the tamper reset cause register when a tamper event occurs	Exploitation statusNot known exploited	FixYes	Affected productSE Firmware	Published08/29/2024	SeverityLow
`CVE-2024-3017`Denial of service in multi-protocol gateway - Zigbee + Thread	Exploitation statusNot known exploited	FixYes	Affected productSiSDK	Published06/27/2024	SeverityMedium
`CVE-2024-3043`Zigbee co-ordinator realignment packet may lead to denial of service	Exploitation statusNot known exploited	FixYes	Affected productEmber ZNet SDK	Published06/27/2024	SeverityHigh
`CVE-2024-4013`Failure to update BT Mesh Replay Protection List	Exploitation statusNot known exploited	FixYes	Affected productGecko SDK	Published06/06/2024	SeverityMedium
`CVE-2024-3052`Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productZ/IP Gateway SDK	Published04/26/2024	SeverityHigh
`CVE-2024-3051`Z/IP Gateway Device Reset Locally Denial of Service Vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productZ/IP Gateway SDK	Published04/26/2024	SeverityHigh
`CVE-2023-51393`Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer	Exploitation statusNot known exploited	FixNot confirmed	Affected productEmber ZNet SDK	Published02/23/2024	SeverityMedium
`CVE-2023-51394`Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash	Exploitation statusNot known exploited	FixYes	Affected productEmber ZNet SDK	Published02/23/2024	SeverityMedium
`CVE-2023-51392`Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM	Exploitation statusNot known exploited	FixYes	Affected productEmber ZNet SDK	Published02/23/2024	SeverityMedium
`CVE-2023-6640`Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productPC Controller	Published02/21/2024	SeverityMedium
`CVE-2023-6533`Silicon Labs PC Controller Denial of Service Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productPC Controller	Published02/21/2024	SeverityMedium
`CVE-2024-22473`Uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices	Exploitation statusNot known exploited	FixNot confirmed	Affected productGSDK	Published02/21/2024	SeverityMedium
`CVE-2024-0240`Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published02/15/2024	SeverityMedium
`CVE-2023-6874`Zigbee Unauthenticated DoS via NWK Sequence number manipulation	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published02/05/2024	SeverityHigh
`CVE-2023-6387`Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published02/02/2024	SeverityHigh
`CVE-2023-5138`Glitch detection not active by default in Silicon Labs Secure Vault High devices	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published01/03/2024	SeverityMedium
`CVE-2023-4280`Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published01/02/2024	SeverityCritical
`CVE-2023-41097`Potential Timing vulnerability in CBC PKCS7 padding calculations	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published12/21/2023	SeverityMedium
`CVE-2023-4020`Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory	Exploitation statusNot confirmed	FixYes	Affected productGSDK	Published12/15/2023	SeverityCritical
`CVE-2023-5310`Z-Wave Denial of Service caused by Stream of Packets	Exploitation statusNot known exploited	FixYes	Affected productGecko SDK	Published12/15/2023	SeverityMedium
`CVE-2023-4489`Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key	Exploitation statusNot known exploited	FixNot confirmed	Affected productZ/IP Gateway SDK	Published12/14/2023	SeverityMedium
`CVE-2023-41096`Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices	Exploitation statusNot known exploited	FixNot confirmed	Affected productEmber ZNet SDK	Published10/26/2023	SeverityMedium
`CVE-2023-41095`Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices	Exploitation statusNot known exploited	FixNot confirmed	Affected productOpenThread SDK	Published10/26/2023	SeverityMedium
`CVE-2023-3487`Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published10/20/2023	SeverityHigh
`CVE-2023-3024`Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published09/29/2023	SeverityMedium
`CVE-2023-3488`Uninitialized variable in Gecko Bootloader can leak secure stack	Exploitation statusNot known exploited	FixYes	Affected productGecko Bootloader	Published07/28/2023	SeverityLow
`CVE-2023-2747`Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published06/15/2023	SeverityLow
`CVE-2023-2683`Connection update while closing connection may lead to denial-of-service	Exploitation statusNot known exploited	FixYes	Affected productBluetooth SDK	Published06/15/2023	SeverityMedium
`CVE-2023-2686`	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published06/15/2023	SeverityCritical
`CVE-2023-2687`	Exploitation statusNot known exploited	FixYes	Affected productGecko SDK	Published06/02/2023	SeverityLow
`CVE-2023-32100`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityMedium
`CVE-2023-32099`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityMedium
`CVE-2023-32098`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityMedium
`CVE-2023-32097`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityLow
`CVE-2023-32096`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityLow
`CVE-2023-2481`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityMedium
`CVE-2023-1132`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityMedium
`CVE-2023-0965`Key duplication in GSDK	Exploitation statusNot known exploited	FixYes	Affected productGecko Platform	Published05/18/2023	SeverityLow
`CVE-2023-0775`Bluetooth LE Invalid prepare write request command leads to denial of service	Exploitation statusNot known exploited	FixYes	Affected productGSDK	Published03/28/2023	SeverityMedium
`CVE-2023-1262`Missing MAC layer security in Wi-SUN Linux Border Router	Exploitation statusNot known exploited	FixYes	Affected productWi-SUN Linux Border Router	Published03/21/2023	SeverityHigh
`CVE-2023-1261`Missing MAC layer security in Wi-SUN SDK	Exploitation statusNot known exploited	FixYes	Affected productWi-SUN SDK	Published03/21/2023	SeverityHigh
`CVE-2022-24939`Malformed Zigbee packet with invalid destination address causes Assert	Exploitation statusNot known exploited	FixYes	Affected productEmber ZNet	Published11/17/2022	SeverityMedium
`CVE-2022-24938`Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier	Exploitation statusNot known exploited	FixYes	Affected productEmber ZNet	Published11/14/2022	SeverityMedium
`CVE-2022-24942`Heap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution	Exploitation statusPublic exploit	FixYes	Affected productGecko Platform	Published11/02/2022	SeverityCritical
`CVE-2022-24936`Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices	Exploitation statusPublic exploit	FixYes	Affected productGecko Bootloader	Published11/02/2022	SeverityHigh