Silicon Labs OpenThread RCP Denial-of-Service Vulnerability via Corrupted SPI Packet Transmission

A denial-of-service vulnerability has been identified in Silicon Labs OpenThread RCP, specifically in high traffic environments. The issue arises because the SPI transmit buffer is not properly cleared, which can lead to the transmission of corrupted packets over SPI to the host. This corruption causes the host to reset the RCP, thereby creating a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by disrupting the normal operation of the RCP and requiring a manual reset to restore functionality.

Remediation

Users can upgrade to the latest version of the Silicon Labs OpenThread SDK to address this vulnerability. The patched version is included in the Simplicity SDK release notes.