Reflected XSS Vulnerability in Simplicity Device Manager Tool by Silicon Labs
CVE-2025-11004

7.5HIGH

Key Information:

Vendor

Silabs.com

Status
Simplicity Device Manager
Vendor
CVE Published:
10 February 2026

What is CVE-2025-11004?

The Simplicity Device Manager Tool from Silicon Labs is vulnerable to a reflected XSS attack across several API endpoints. This flaw allows an attacker on the same network to exploit the vulnerability, potentially compromising the confidentiality, integrity, and availability of affected systems that run the Simplicity Device Manager Tool. Immediate attention and remedial action are necessary to mitigate risks associated with this vulnerability.

Affected Version(s)

Simplicity Device Manager 0 <= 0.99.35 - alpha

References

https://community.silabs.com/068Vm00000fjgJj
vendor-advisorypermissions-required

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.