Vulnerability in Silabs.com Openthread
CVE-2025-2329
In high traffic environments, a Silicon Labs OpenThread RCP (see impacted versions) fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host, causing the host to reset the RCP which results in a denial of service.
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (11.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 11th percentile — 11.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Silabs.com Openthread — versions 2.5.0, 2.6.0, 0
Weakness classification (CWE)
References
- github.com/SiliconLabs/simplicity_sdk/releases (release-notes)
- github.com/SiliconLabs/gecko_sdk/releases (release-notes)
- community.silabs.com/069Vm00000SNyueIAD (vendor-advisory, permissions-required)