CVE-2026-19293

{
  "id": "CVE-2026-19293",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-13T15:19:37.873",
  "lastModified": "2026-10-23T18:10:00.167",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SMP security request (from peripheral) does not include the maximum\nencryption key size supported. Using a key with less than the maximum keysize\nmakes brute-forcing the key easier. See V6 in BLERP paper linked below."
    },
    {
      "lang": "es",
      "value": "Solicitud de seguridad SMP (desde el periférico) no incluye el tamaño máximo de clave de cifrado compatible. Usar una clave con un tamaño inferior al tamaño máximo de clave facilita el ataque de fuerza bruta a la clave. Ver V6 en el documento BLERP enlazado a continuación."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "silabs.com",
          "product": "WiseConnect",
          "defaultStatus": "unaffected",
          "packageName": "SiSDK",
          "versions": [
            {
              "version": "4.0.0",
              "lessThan": "4.1.0",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.0.0",
              "lessThan": "2.14.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-13T17:04:23.200962Z",
          "id": "CVE-2026-19293",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-521"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://community.silabs.com/068Vm00000x0yyH",
      "source": "[email protected]"
    },
    {
      "url": "https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes",
      "source": "[email protected]"
    },
    {
      "url": "https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes",
      "source": "[email protected]"
    },
    {
      "url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/",
      "source": "[email protected]"
    }
  ]
}