Emberznet
Silabs · 17 CVEs
Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
Jun 25, 2026
Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
Jun 25, 2026
Level Control Move divide-by-zero in EmberZNet v9.0.2
Jun 25, 2026
Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
Jun 25, 2026
IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
Jun 25, 2026
Door Lock GetUserType invalid table index in EmberZNet v9.0.2
Jun 25, 2026
Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
Jun 25, 2026
OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2
Jun 25, 2026
Color Control color-temperature assertion abort in EmberZNet v9.0.2
Jun 25, 2026
Color Control hue/saturation assertion abort in EmberZNet v9.0.2
Jun 25, 2026
Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
Jun 25, 2026
Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer
Feb 23, 2024
Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash
Feb 23, 2024
Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
Feb 23, 2024
Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet
Oct 4, 2023
Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier
Nov 14, 2022
Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier
Nov 14, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-47154 | Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2026-47153 | Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2026-47152 | Level Control Move divide-by-zero in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2026-47151 | Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 | HIGH | 0.38% | Jun 25, 2026 |
| CVE-2026-47150 | IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 | HIGH | 0.38% | Jun 25, 2026 |
| CVE-2026-47149 | Door Lock GetUserType invalid table index in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2026-47148 | Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2026-47147 | OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 | HIGH | 0.40% | Jun 25, 2026 |
| CVE-2026-47146 | Color Control color-temperature assertion abort in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2026-47145 | Color Control hue/saturation assertion abort in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2026-4526 | Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 | HIGH | 0.44% | Jun 25, 2026 |
| CVE-2023-51393 | Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer | HIGH | 0.52% | Feb 23, 2024 |
| CVE-2023-51394 | Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash | HIGH | 0.52% | Feb 23, 2024 |
| CVE-2023-51392 | Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM | CRITICAL | 0.24% | Feb 23, 2024 |
| CVE-2023-41094 | Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet | CRITICAL | 0.69% | Oct 4, 2023 |
| CVE-2022-24938 | Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier | HIGH | 0.75% | Nov 14, 2022 |
| CVE-2022-24937 | Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier | CRITICAL | 0.69% | Nov 14, 2022 |
Showing 1 to 17 of 17 CVEs