Veille CVE

Recherche « Silicon Labs EmberZNet »

5 CVE

  1. CVE-2026-94502 7.5 Élevée

    Silicon Labs EmberZNet

    In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.

  2. CVE-2026-85080 6.0 Moyenne

    Silicon Labs EmberZNet

    In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using this vulnerability, so no route to remote code execution was observed. These messages must come from a device that has already joined the network. Only devices supporting the Group Cluster are impacted.

  3. CVE-2026-85079 7.5 Élevée

    Silicon Labs EmberZNet

    In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can be performed.

  4. CVE-2026-66282 6.0 Moyenne

    Silicon Labs EmberZNet

    In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.

  5. CVE-2026-66281 6.0 Moyenne

    Silicon Labs EmberZNet

    In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condition (infinite loop). These messages must come from a device that has already joined the network. Only devices supporting manufacturer-specific clusters are impacted.