What’s Vulnerable › Vulnerabilities
CVE-2025-10285: Simplcity Device Manager exposes NTLMv2 hash
- Severity: high (CVSS 7.4 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-04 · updated 2026-10-18
- Weakness: CWE-200
Description
The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password.
Affected products
- silabs.com Simplicity Studio V6: before 0.100.18 — fixed in 0.100.18
How to fix
Upgrade to a fixed version: silabs.com Simplicity Studio V6 0.100.18. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-10285 or the next vulnerability affects your stack