CSA IoT maintains a narrowly focused product line centered on the Matter smart-home connectivity protocol implementation, supporting interoperability across IoT devices and platforms. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Csa Iot over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-56362HIGH A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. When a Move | Jul 14, 2026 | 7.5 | 33 | NO | NO |
CVE-2025-56363HIGH A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters (Channel, A | Jul 14, 2026 | 7.5 | 33 | NO | NO |
CVE-2025-56364HIGH A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first check | Jul 14, 2026 | 7.5 | 33 | NO | NO |
CVE-2025-56365HIGH A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent | Jul 14, 2026 | 7.5 | 33 | NO | NO |
CVE-2025-56361HIGH A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControl | Jul 14, 2026 | 7.5 | 30 | NO | NO |
CVE-2024-3297MEDIUM An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between two devices, as implemented in the Matter protocol versions | Jul 24, 2024 | 6.5 | 19 | NO | NO |
An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices par | Jul 24, 2024 | 3.5 | 15 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Csa Iot.
Media articles that mention a CVE ID that affects a product developed by Csa Iot — matched by CVE ID, not by vendor name.