6.0
Medium
CVE-2025-12986 When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service…
Description
When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gecko SDK 4.5 | earliest → 4.5.0 | No fix stated |
Other CVEs of Gecko SDK
The 6 CVEs of Gecko SDK →
CVE-2025-14547
An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs…
2.3
Low
CVE-2025-8414
Due to improper input validation, a buffer overflow vulnerability is present in
Zigbee EZSP Host Applications
9.4
Critical
CVE-2024-4013
A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection List (RPL)…
5.6
Medium
CVE-2023-5310
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK…
5.7
Medium