What’s Vulnerable › Vulnerabilities
CVE-2025-10693: Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
- Severity: high (CVSS 7.6 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-10-31 · updated 2026-10-07
- Weakness: CWE-757
Description
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1.
Affected products
- silabs.com Silicon Labs Z-Wave SDK: from 2025.6.0 through 2025.6.1
References
Get alerted when CVE-2025-10693 or the next vulnerability affects your stack