CVE-2026-19293

{"id": "CVE-2026-19293", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19293", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-13T17:04:23.200962Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "product-security@silabs.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "product-security@silabs.com", "affectedData": [{"vendor": "silabs.com", "product": "WiseConnect", "versions": [{"status": "affected", "version": "4.0.0", "lessThan": "4.1.0", "versionType": "semver"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.14.0", "versionType": "semver"}], "packageName": "SiSDK", "defaultStatus": "unaffected"}]}], "published": "2026-08-13T15:19:37.873", "references": [{"url": "https://community.silabs.com/068Vm00000x0yyH", "source": "product-security@silabs.com"}, {"url": "https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes", "source": "product-security@silabs.com"}, {"url": "https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes", "source": "product-security@silabs.com"}, {"url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/", "source": "product-security@silabs.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "product-security@silabs.com", "description": [{"lang": "en", "value": "CWE-521"}]}], "descriptions": [{"lang": "en", "value": "SMP security request (from peripheral)\u00a0does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below."}, {"lang": "es", "value": "Solicitud de seguridad SMP (desde el perif\u00e9rico) no incluye el tama\u00f1o m\u00e1ximo de clave de cifrado compatible. Usar una clave con un tama\u00f1o inferior al tama\u00f1o m\u00e1ximo de clave facilita el ataque de fuerza bruta a la clave. Ver V6 en el documento BLERP enlazado a continuaci\u00f3n."}], "lastModified": "2026-10-23T18:10:00.167", "sourceIdentifier": "product-security@silabs.com"}