CNNVD-202507-3770 Information

CNNVD ID

CNNVD-202507-3770

CVE-2025-1394

  • CNNVD Published: 2025-07-30

Description (Chinese)

Silicon Labs Zigbee EmberZNet SDK是美国Silicon Labs公司的一个用于开发Zigbee网络的软件开发工具包 Silicon Labs Zigbee EmberZNet SDK存在安全漏洞,该漏洞源于缓冲区管理API错误状态处理不当,可能导致数据泄露或拒绝服务攻击。

Description (English)

Silicon Labs Zigbee EmberZNet SDK is a software development tool for the development of the Zigbee network by the American company Silicon Labs Package Silicon Labs Zigbee EmberZNet SDK had a security loophole, which stemmed from the mishandling of the API management of the buffer zone, which could lead to data leaks or denial of service attacks.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

芯科科技

Published

2025-07-30

Last Modified

2026-02-24

References

https://community.silabs.com/068Vm00000SkHNX https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-7.5.0.0.pdf https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.0.3.0.pdf https://www.silabs.com/documents/public/release-notes/emberznet-release-notes-8.1.0.0.pdf

Patch

https://www.silabs.com/software-and-tools/zigbee-emberznet?tab=downloads

Share on: