CVE-2025-56362
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-56362
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. When a MoveToLevel command is sent and immediately followed by a write of OperationMode=2 (in the Pump Configuration and Control cluster), the server tick function violates the assertion `currentLevel < maxLevel`, resulting in a crash. This can be exploited remotely without authentication to cause denial of service. Affected versions include 1.3 and 1.4 (commit ab3d5ae).
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Connectivity Standards Alliance Matter 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Connectivity Standards Alliance Matter是Connectivity Standards Alliance组织开源的一个统一的开源应用层连接标准。旨在使开发人员和设备制造商能够连接并构建可靠、安全的生态系统,并提高联网家庭设备之间的兼容性。 Connectivity Standards Alliance Matter 1.4.2之前版本存在安全漏洞，该漏洞源于Level Control集群周期性服务器tick逻辑中的可达断言问题，当发送MoveToLevel命令后立即写入
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2025-56362
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-56362
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-56362 (1)
Vendor Pages for CVE-2025-56362 (1)
Same Patch Batch · n/a · 2026-07-14 · 16 CVEs total
| CVE-2026-15702 | 6.3 MEDIUM | tamagui config.ts updateConfig prototype pollution |
| CVE-2026-15700 | 4.7 MEDIUM | DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal |
| CVE-2026-15690 | 3.1 LOW | open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer deref |
| CVE-2026-51105 | amule 缓冲区错误漏洞 | |
| CVE-2026-36214 | osTicket 安全漏洞 | |
| CVE-2026-52101 | Andrei Marcu linx-server 安全漏洞 | |
| CVE-2026-52100 | Andrei Marcu linx-server 安全漏洞 | |
| CVE-2026-38450 | Aetopia Digital Asset Management DAM 安全漏洞 | |
| CVE-2025-56361 | Connectivity Standards Alliance Matter 安全漏洞 | |
| CVE-2025-56364 | Connectivity Standards Alliance Matter 安全漏洞 | |
| CVE-2025-56365 | Connectivity Standards Alliance Matter 安全漏洞 | |
| CVE-2025-56363 | Connectivity Standards Alliance Matter 安全漏洞 | |
| CVE-2026-36035 | CAXperts UniversalPlantViewer WebServices Server 安全漏洞 | |
| CVE-2026-51807 | Osamu Watanabe OpenHTJ2K 安全漏洞 | |
| CVE-2026-51808 | Osamu Watanabe OpenHTJ2K 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
V. Comments for CVE-2025-56362
No comments yet