CVE-2025-56361

Analyzed Analyzed - Analysis Complete

Matter SDK Assertion Failure Leading to DoS

Publication date: 2026-07-14

Last updated on: 2026-07-17

Assigner: MITRE

Description

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControlClusterServerTickCallback`). When a MoveToLevel command is executed and followed by a conflicting write to the OperationMode attribute (in the Pump Configuration and Control cluster), an invariant check (`minLevel < currentLevel`) fails and causes the device to abort. This leads to a denial of service condition. The issue is confirmed in SDK versions 1.3 and 1.4 (commit ab3d5ae), and is triggered remotely without authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-17

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2025-56361

EUVD

EUVD-2025-210468

Affected Vendors & Products

Vendor	Product	Version / Range
csa-iot	matter	1.3.0.0
csa-iot	matter	1.4.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This is a reachable assertion vulnerability in the Matter SDK (versions 1.3 to 1.4). It occurs when a MoveToLevel command is sent to a device, followed by a conflicting write to the OperationMode attribute in the Pump Configuration and Control cluster. This causes an invariant check to fail, leading the device to abort and resulting in a denial of service.

Detection Guidance

This vulnerability is specific to the Matter SDK and requires checking for the presence of affected versions (1.3 to 1.4) and monitoring for denial of service conditions triggered by conflicting MoveToLevel and OperationMode commands. No direct commands are provided in the context to detect this issue.

Impact Analysis

The vulnerability can cause affected Matter-enabled devices to crash or become unresponsive, disrupting their normal operation. Since it can be triggered remotely without authentication, attackers could exploit it to disable devices on a network, potentially affecting smart home systems or IoT deployments.

Mitigation Strategies

Update the Matter SDK to a version beyond 1.4 where the vulnerability is addressed. If updating is not immediately possible, restrict network access to Matter-enabled devices to trusted sources only and monitor for abnormal device behavior.

Hi! I’m here to help you understand CVE-2025-56361. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70