Recherche « Silabs emberznet »
11 CVE
-
CVE-2026-4526 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed.
-
CVE-2026-47154 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Simple Metering cluster may be impacted.
-
CVE-2026-47153 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.
-
CVE-2026-47152 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.
-
CVE-2026-47151 7.1 Élevée
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location of this data is limited. These messages must come from a device that has already joined the network. Only devices supporting the Door Lock cluster may be impacted.
-
CVE-2026-47150 7.1 Élevée
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and location of this write is limited. These messages must come from a device that has already joined the network. Only devices supporting the IAS Zone cluster may be impacted.
-
CVE-2026-47149 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Door Lock cluster may be impacted.
-
CVE-2026-47148 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Groups cluster may be impacted.
-
CVE-2026-47147 7.1 Élevée
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read back to the requester. The size and location of this data is limited. These requests must come from a device that has already joined the network. Only devices supporting the OTA Server cluster may be impacted.
-
CVE-2026-47146 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the network. Only devices supporting the Color Control cluster may be impacted.
-
CVE-2026-47145 6.5 Moyenne
Silicon Labs EmberZNet · Silabs emberznet
In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the network. Only devices supporting the Color Control cluster may be impacted.