CVE-2025-7448 HIGH

CVE-2025-7448: Man in the middle (MitM) attack vulnerability in Wi-SUN library

Vendor Silabs.com
Product Wi-SUN Stack
Weakness CWE-290
Published September 12, 2025
Last update September 12, 2025
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Wi-SUN unexpected 4- Way Handshake packet receptions may lead to predictable keys and potentially leading to Man in the middle (MitM) attack

Key dates

02Disclosure timeline

September 12, 2025 CVE published
September 12, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-25938 FUXA Unauthenticated Remote Code Execution in Node-RED Integration CVE-2026-24000 Fleet has a rate limiting bypass via untrusted client IP headers CVE-2025-61778 Akka.Remote TLS did not properly implement certificate-based authentication CVE-2026-32492 WordPress My Tickets plugin <= 2.1.1 - Bypass Vulnerability vulnerability CVE-2022-23131 Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML