CVE-2026-19293

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-19293", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "state": "PUBLISHED", "assignerShortName": "Silabs", "dateReserved": "2026-08-07T16:21:06.928Z", "datePublished": "2026-08-13T14:18:05.429Z", "dateUpdated": "2026-08-13T17:06:08.921Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2026-08-13T14:18:05.429Z"}, "title": "SMP security request", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-521", "description": "CWE-521 Weak password requirements", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-49", "descriptions": [{"lang": "en", "value": "CAPEC-49 Password Brute Forcing"}]}], "affected": [{"vendor": "silabs.com", "product": "WiseConnect", "packageName": "SiSDK", "versions": [{"status": "affected", "version": "4.0.0", "lessThan": "4.1.0", "versionType": "semver"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.14.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "SMP security request (from peripheral)\u00a0does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "SMP security request (from peripheral) does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below."}]}], "references": [{"url": "https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes", "tags": ["release-notes"]}, {"url": "https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes", "tags": ["release-notes"]}, {"url": "https://community.silabs.com/068Vm00000x0yyH"}, {"url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T17:04:23.200962Z", "id": "CVE-2026-19293", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T17:06:08.921Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-19293", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-13T17:04:23.200962Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T17:05:18.319Z"}}], "cna": {"title": "SMP security request", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-49", "descriptions": [{"lang": "en", "value": "CAPEC-49 Password Brute Forcing"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "silabs.com", "product": "WiseConnect", "versions": [{"status": "affected", "version": "4.0.0", "lessThan": "4.1.0", "versionType": "semver"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.14.0", "versionType": "semver"}], "packageName": "SiSDK", "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes", "tags": ["release-notes"]}, {"url": "https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes", "tags": ["release-notes"]}, {"url": "https://community.silabs.com/068Vm00000x0yyH"}, {"url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "SMP security request (from peripheral)\u00a0does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below.", "supportingMedia": [{"type": "text/html", "value": "SMP security request (from peripheral) does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-521", "description": "CWE-521 Weak password requirements"}]}], "providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2026-08-13T14:18:05.429Z"}}}, "cveMetadata": {"cveId": "CVE-2026-19293", "state": "PUBLISHED", "dateUpdated": "2026-08-13T17:06:08.921Z", "dateReserved": "2026-08-07T16:21:06.928Z", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "datePublished": "2026-08-13T14:18:05.429Z", "assignerShortName": "Silabs"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageName": "SiSDK", "product": "WiseConnect", "vendor": "silabs.com", "versions": [{"lessThan": "4.1.0", "status": "affected", "version": "4.0.0", "versionType": "semver"}, {"lessThan": "2.14.0", "status": "affected", "version": "2.0.0", "versionType": "semver"}]}], "source": "product-security@silabs.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SMP security request (from peripheral)\u00a0does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below."}, {"lang": "es", "value": "Solicitud de seguridad SMP (desde el perif\u00e9rico) no incluye el tama\u00f1o m\u00e1ximo de clave de cifrado compatible. Usar una clave con un tama\u00f1o inferior al tama\u00f1o m\u00e1ximo de clave facilita el ataque de fuerza bruta a la clave. Ver V6 en el documento BLERP enlazado a continuaci\u00f3n."}], "id": "CVE-2026-19293", "lastModified": "2026-10-23T18:10:00.167", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "product-security@silabs.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19293", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T17:04:23.200962Z", "version": "2.0.3"}}]}, "published": "2026-08-13T15:19:37.873", "references": [{"source": "product-security@silabs.com", "url": "https://community.silabs.com/068Vm00000x0yyH"}, {"source": "product-security@silabs.com", "url": "https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes"}, {"source": "product-security@silabs.com", "url": "https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes"}, {"source": "product-security@silabs.com", "url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/"}], "sourceIdentifier": "product-security@silabs.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-521"}], "source": "product-security@silabs.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.0.0,4.1.0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.0.0,2.14.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WiseConnect", "source": "cna", "vendor": "silabs.com"}, "product": "wiseconnect", "vendor": "silabs.com"}], "created": "2026-08-13T17:00:04.382154+00:00", "updated": "2026-08-14T09:31:27.220954+00:00", "vendors": ["silabs.com", "silabs.com$PRODUCT$wiseconnect"]}