CVE-2026-94502

7.5 Élevée

Publiée le 22/10/2026 à 16:17 · Modifiée le 22/10/2026 à 17:27 · En attente d'analyse NVD · Source : product-security@silabs.com

Description

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.

Traduire en français

Produits concernés

Silicon Labs EmberZNet

Scores CVSS

Version	Score	Source	Vecteur
4.0	7.5 Élevée	product-security@silabs.com	`CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`

Faiblesses (CWE)

CWE-121

Références

https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000589.md

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories