Vulnerability in Silabs.com Zigbee
CVE-2025-1221
A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system (CPCd) due to heavy Zigbee traffic, resulting in a Denial of Service (DoS) attack, Only hard reset will bring the device to normal operation
EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.
Affected products
- Silabs.com Zigbee — versions 0, 4.4.3
Weakness classification (CWE)
Public proof-of-concept exploits
References
- product-security@silabs.com (release-notes)
- product-security@silabs.com (release-notes)
- product-security@silabs.com (release-notes)
- product-security@silabs.com (vendor-advisory, permissions-required)
Frequently asked questions
- What is CVE-2025-1221?
- CVE-2025-1221 is a vulnerability in Silabs.com Zigbee, classified under Improper Locking. Published 2025-07-30.
- Is CVE-2025-1221 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.