Web Interface Vulnerability in Silicon Labs Simplicity Device Manager
CVE-2025-10285
7.4HIGH
What is CVE-2025-10285?
The web interface of the Silicon Labs Simplicity Device Manager is publicly accessible, allowing unauthorized users to extract NTLMv2 hashes. This could facilitate further unauthorized access, enabling attackers potentially to gain control over target user accounts by cracking their domain passwords. Organizations using this product should take immediate action to secure their web interface and safeguard sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Simplicity Studio V6 Windows 0 < 0.100.18
