PT-2026-27455 · Silabs.Com · Simplicity Installer Tool (Silicon Labs Tool - Slt) For Simplicity Studio V6+1

CVE-2025-11571 · Publicado 2026-03-24 · Atualizado 2026-03-24

Positive Technologies (AI Summary)

CVSS v4.0

2.1

Baixa

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description Vulnerable endpoints accept user-controlled input through a URL in JSON format, enabling command execution. The commands allowed to execute can open executables, but cannot pass parameters or arguments. Successful exploitation requires the attacker to be on the same network. The affected endpoints allow execution of commands via a URL containing JSON formatted input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2025-11571

Produtos afetados

Simplicity Installer Tool (Silicon Labs Tool - Slt) For Simplicity Studio V6

Simplicity Studio V5

Referências · 3

• https://twitter.com/CVEnew/status/2036505761069801891 · Publicação no Twitter
• https://community.silabs.com/068Vm00000htltZ · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-11571 · Nota de Segurança