Vulnerability in Silabs.com Simplicity Sdk

CVE-2025-14972

* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. * KSU keys using SYMCRYPTO will be impacted by this vulnerability.

EPSS: 0.000 (7.1th percentile) — read the EPSS interpretation.

Affected products

Silabs.com Simplicity Sdk — versions 0

Weakness classification (CWE)

CWE-331 — Insufficient Entropy

References

product-security@silabs.com (permissions-required, third-party-advisory)