Information disclosure in Silabs.com Simplicity Studio V6
CVE-2025-10285
The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password.
Vulnerability class: Information Disclosure
EPSS: 0.002 (4.9th percentile) — read the EPSS interpretation.
Affected products
- Silabs.com Simplicity Studio V6 — versions 0
Weakness classification (CWE)
References
- product-security@silabs.com (vendor-advisory, permissions-required)