EUVD-2026-72878
GHSA-28qg-4c8p-cqvx
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent-only attack (AV:A); no auth needed (PR:N); pure availability DoS, no confidentiality or integrity impact.
Primary rating from Vendor (Silabs).
CVSS VectorVendor: Silabs
Lifecycle Timeline
2DescriptionCVE.org
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below.
AnalysisAI
Denial of service in Silicon Labs RS9116W/SiWx917 wireless modules running WiSeConnect 2.x allows an adjacent unauthenticated attacker to crash or disable the wireless stack by sending a crafted, unencrypted 'pause encryption request' management frame. The device incorrectly accepts and acts on this unauthenticated control message without verifying that it is protected by the session encryption, violating the expected security contract (CWE-440). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Attacker must be within Wi-Fi radio range (adjacent network - same BSS or at minimum same RF environment) of the target RS9116W/SiWx917 device. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 7.1 with vector AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H reflects an availability-only, adjacent-network DoS - calibrated correctly for this class of vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade WiSeConnect SDK to a version beyond the 2.x branch per Silicon Labs guidance at https://community.silabs.com/068Vm00000x0Yqy. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all deployed devices using Silicon Labs RS9116W/SiWx917 modules and document their current WiSeConnect 2.x firmware versions; contact Silicon Labs support for an estimated patch release timeline and interim guidance. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-440 – Expected Behavior Violation
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today