PT-2025-13010

CVE-2025-2838

·

Published

2025-03-26

·

Updated

2025-03-27

Description by

CVSS 3.1
6.5
Medium
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Silicon Labs Gecko OS (affected versions not specified)
Description This issue allows network-adjacent attackers to create a denial-of-service condition on affected installations. The specific flaw exists within the processing of DNS responses, resulting from a logic error that can lead to an infinite loop. An attacker can leverage this to create a denial-of-service condition on the system. Authentication is not required to exploit this issue.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾