CVE-2025-10285CWE-200information-disclosure
CVE-2025-10285
published December 5, 2025
What it is
The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password.
The record
Technical detail
- CVSS
- 7.4 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00174 · 6.5th percentile
- Weakness
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
- Published
- 2025-12-05T03:15Z
References (1)
EPSS history
Timeline