This vulnerability arises from improper use of the PUF key in the EFR32xG27 device within Silicon Labs' SiSDK, leading to predictable user keys due to a small seed space in the PRNG. The predictable keys compromise cryptographic strength, potentially allowing attackers to guess or reproduce keys that should be random. The CVSS 4.0 base score is 8.4, reflecting high severity with attack vector being adjacent network, low attack complexity, no privileges or user interaction required, but with high impact on confidentiality, integrity, and system availability. No vendor advisory or patch information is currently available.

The vulnerability allows attackers with adjacent network access to predict cryptographic keys generated by the affected devices, severely impacting confidentiality, integrity, and availability of the system. This could lead to unauthorized access or manipulation of sensitive data or system functions relying on these keys.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor Silicon Labs communications for updates and consider limiting exposure of affected devices to adjacent network attackers where feasible.