CVE-2025-56365

{"id": "CVE-2025-56365", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-56365", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-05T17:46:46.676580Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.1}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-07-14T23:17:27.593", "references": [{"url": "https://github.com/project-chip/connectedhomeip/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/project-chip/connectedhomeip/issues/37184", "tags": ["Exploit", "Issue Tracking"], "source": "cve@mitre.org"}, {"url": "https://github.com/project-chip/connectedhomeip/pull/37207", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/project-chip/connectedhomeip/issues/37184", "tags": ["Exploit", "Issue Tracking"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-617"}]}], "descriptions": [{"lang": "en", "value": "A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent to a nonexistent endpoint and cluster (e.g., 0x34), the code incorrectly treats the endpoint as valid due to missing checks in CodegenDataModelProvider::Invoke. This causes a VerifyOrDie failure in ProcessCommandDataIB and results in a crash (SIGABRT). The issue has been acknowledged and fixed in a later revision (PR #37207)."}, {"lang": "es", "value": "Una vulnerabilidad de aserci\u00f3n alcanzable existe en el SDK de Matter (connectedhomeip) antes de la 1.4.0, en la l\u00f3gica de procesamiento de comandos del modelo de interacci\u00f3n. Cuando se env\u00eda un InvokeCommandRequest a un endpoint y cl\u00faster inexistentes (p. ej., 0x34), el c\u00f3digo trata incorrectamente el endpoint como v\u00e1lido debido a la falta de comprobaciones en CodegenDataModelProvider::Invoke. Esto provoca un fallo de VerifyOrDie en ProcessCommandDataIB y resulta en un bloqueo (SIGABRT). El problema ha sido reconocido y corregido en una revisi\u00f3n posterior (PR #37207)."}], "lastModified": "2026-10-13T09:10:00.323", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:csa-iot:matter:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF4DD78D-70A5-4B35-AAB4-3F4F948B6194", "versionEndExcluding": "1.4.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}