CVE-2025-10693 | THREATINT

Description

When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1.

PUBLISHED Reserved 2025-09-18 | Published 2025-10-31 | Updated 2025-10-31 | Assigner Silabs

HIGH: 7.6CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Product status

Default status

unaffected

2025.6.0 (custom)

affected

References

community.silabs.com/068Vm00000WN3J0 vendor-advisory permissions-required

cve.org (CVE-2025-10693)

nvd.nist.gov (CVE-2025-10693)

Download JSON