EUVD-2026-31969
GHSA-h7g2-qqw7-mf7r
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
AnalysisAI
Bluetooth LE bond downgrade in Silicon Labs Simplicity SDK allows an adjacent attacker to weaken connection security by deleting an existing bond, impersonating the previously bonded peer, and forcing a new pairing under attacker-controlled parameters. The flaw enables compromise of confidentiality, integrity, and availability of BLE communications on devices built with the affected SDK, and no public exploit has been identified at time of analysis.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all products and firmware versions using Silicon Labs Simplicity SDK with Bluetooth LE capabilities in your environment. Within 7 days: Complete inventory of affected deployed devices, assess network exposure and criticality, and prioritize systems handling sensitive data or controlling physical processes. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today