PT-2026-27455 · Silabs.Com · Simplicity Installer Tool (Silicon Labs Tool - Slt) For Simplicity Studio V6+1

Published 2026-03-24 · Updated 2026-03-24 · CVE-2025-11571

Positive Technologies (AI Summary)

CVSS v4.0

2.1

Low

Base vector

AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description Vulnerable endpoints accept user-controlled input through a URL in JSON format, enabling command execution. The commands allowed to execute can open executables, but cannot pass parameters or arguments. Successful exploitation requires the attacker to be on the same network. The affected endpoints allow execution of commands via a URL containing JSON formatted input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-11571

Affected Products

Simplicity Installer Tool (Silicon Labs Tool - Slt) For Simplicity Studio V6

Simplicity Studio V5

References · 3

• https://community.silabs.com/068Vm00000htltZ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11571 · Security Note
• https://twitter.com/CVEnew/status/2036505761069801891 · Twitter Post