CVE-2025-10693CWE-757

CVE-2025-10693

published November 1, 2025

CVSS
7.6
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1.

The record
Technical detail
CVSS
7.6 · NONE
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weakness
CWE-757 · Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
Published
2025-11-01T00:15Z
References (1)
https://community.silabs.com/068Vm00000WN3J0 · [email protected]
EPSS history
Timeline
  • 31 OCT 19:20Z
    Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
    cvelistv5