Information disclosure in Silabs.com Simplicity Studio V6

CVE-2025-10285

The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password.

Vulnerability class: Information Disclosure

EPSS: 0.002 (4.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References