CVE-2025-7448 - Man in the middle (MitM) attack vulnerability in Wi-SUN library

HIGH

Man in the middle (MitM) attack vulnerability in Wi-SUN library

Published Sep 12, 2025

8.6

HIGH

CVSS 4.0

EPSS 0.18%

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle (MitM) attack

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Silabs.com	Wi-SUN Stack	unaffected	Affected 2.6.0

No remediation recorded yet.

Weaknesses (1)

CWE-290

Authentication Bypass by Spoofing

Link	Providers	Tags
https://community.silabs.com/068Vm00000UtuIG		vendor-advisorypermissions-required
https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wisun-release-notes/		release-notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-29030		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Silabs

Published Sep 12, 2025

Updated Sep 12, 2025

Reserved Jul 11, 2025

CISA Vulnrichment

Updated Sep 12, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner Silabs

Published Sep 12, 2025

Updated Sep 12, 2025

GitHub

No data