PT-2025-30887 · Silicon · Openthread Rcp

Published 2025-07-25 · Updated 2025-07-25 · CVE-2025-2329

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Silicon Labs OpenThread RCP (affected versions not specified)

Description In high traffic environments, the RCP fails to clear the SPI transmit buffer, potentially sending a corrupt packet over SPI to its host. This can cause the host to reset the RCP, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2025-2329

Affected Products

Openthread Rcp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-2329 · Security Note
• https://community.silabs.com/069Vm00000SNyueIAD · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-2329 · Vendor Advisory
• https://github.com/SiliconLabs/gecko_sdk/releases · Note
• https://github.com/SiliconLabs/simplicity_sdk/releases · Note
• https://twitter.com/CVEnew/status/1948782088028913738 · Twitter Post