CVE-2025-11571

Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass parameters or arguments. To successfully execute this attack, the attacker needs to be on the same network.

CVSS

No CVSS.

References

Link	Resource
https://community.silabs.com/068Vm00000htltZ

Configurations

No configuration.

History

17 Jun 2026, 08:30

Type	Values Removed	Values Added
Summary		(es) Los puntos finales vulnerables aceptan entrada controlada por el usuario a través de una URL en formato JSON, lo que permite la ejecución de comandos. Los comandos permitidos para ejecutar pueden abrir ejecutables. Sin embargo, los comandos no pueden pasar parámetros o argumentos. Para ejecutar con éxito este ataque, el atacante necesita estar en la misma red.

24 Mar 2026, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-03-24 17:16

Updated : 2026-06-17 08:30

NVD link : CVE-2025-11571

Mitre link : CVE-2025-11571

CVE.ORG link : CVE-2025-11571

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-11571", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11571", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-24T17:42:54.893187Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "product-security@silabs.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "product-security@silabs.com", "affectedData": [{"vendor": "silabs.com", "product": "Simplicity Studio v5", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "5.11.2.1"}], "defaultStatus": "unaffected"}, {"vendor": "silabs.com", "product": "Simplicity Installer tool (Silicon Labs Tool - SLT) for Simplicity Studio v6", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.0.1"}], "defaultStatus": "unaffected"}]}], "published": "2026-03-24T17:16:25.863", "references": [{"url": "https://community.silabs.com/068Vm00000htltZ", "source": "product-security@silabs.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "product-security@silabs.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass parameters or arguments.\u00a0\nTo successfully execute this attack, the attacker needs to be on the same network."}, {"lang": "es", "value": "Los puntos finales vulnerables aceptan entrada controlada por el usuario a trav\u00e9s de una URL en formato JSON, lo que permite la ejecuci\u00f3n de comandos. Los comandos permitidos para ejecutar pueden abrir ejecutables. Sin embargo, los comandos no pueden pasar par\u00e1metros o argumentos. Para ejecutar con \u00e9xito este ataque, el atacante necesita estar en la misma red."}], "lastModified": "2026-06-17T08:30:43.720", "sourceIdentifier": "product-security@silabs.com"}