Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. When a MoveToLevel command is sent and immediately followed by a write of OperationMode=2 (in the Pump Configuration and Control cluster), the server tick function violates the assertion `currentLevel < maxLevel`, resulting in a crash. This can be exploited remotely without authentication to cause denial of service. Affected versions include 1.3 and 1.4 (commit ab3d5ae).
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-15 | 1 | Disclosure1 |
| 2026-07-17 | 1 | Patch1 |
🚨 HIGH: CVE-2025-56362 (CVSS 7.5) - Matter SDK DoS vulnerability in connectedhomeip <1.4.2. Remotely exploitable without auth via assertion crash in Level Control cluster. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/93127h2qon
Post summary
The tweet alerts about a high‑severity CVE‑2025‑56362, a DoS vulnerability in older Matter SDK versions, and urges users to apply the available patch immediately.
CVE-2025-56362 Assertion Vulnerability in Matter SDK Level Control Cluster Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-56362
Post summary
The text reports CVE-2025-56362 as an assertion‑based denial‑of‑service flaw in Matter SDK’s Level Control Cluster, but offers no PoC, exploit, patch, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | csa-iot | matter | 1.3.0.0 | - | - |
| App | csa-iot | matter | 1.4.0.0 | - | - |