Approved changes feed: RSS · Atom
cpe:2.3:a:silicon_labs:emberznet:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Silicon Labs (e0e4a3d4-8910-5169-b452-cd7cc713af8f) |
|---|---|
| Product | Emberznet (2b79d2e6-93b6-51fd-a6da-f2756ee12de9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4526 |
vulnerable | 2026-07-29 00:57:46.826756 |
Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed.
Published: 2026-06-25T13:32:26.231Z
Updated: 2026-06-25T14:04:28.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47154 |
vulnerable | 2026-07-29 00:54:59.858448 |
Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Simple Metering cluster may be impacted.
Published: 2026-06-25T13:43:10.496Z
Updated: 2026-06-25T14:19:07.404Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47153 |
vulnerable | 2026-07-29 00:54:59.858335 |
Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.
Published: 2026-06-25T13:42:16.686Z
Updated: 2026-06-25T14:18:04.866Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47152 |
vulnerable | 2026-07-29 00:54:59.858220 |
Level Control Move divide-by-zero in EmberZNet v9.0.2
In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.
Published: 2026-06-25T13:41:28.646Z
Updated: 2026-06-25T14:17:45.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47151 |
vulnerable | 2026-07-29 00:54:59.858002 |
Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location of this data is limited. These messages must come from a device that has already joined the network. Only devices supporting the Door Lock cluster may be impacted.
Published: 2026-06-25T13:40:36.172Z
Updated: 2026-06-25T14:17:02.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47150 |
vulnerable | 2026-07-29 00:54:59.857882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47149 |
vulnerable | 2026-07-29 00:54:59.857647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47148 |
vulnerable | 2026-07-29 00:54:59.857520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47147 |
vulnerable | 2026-07-29 00:54:59.857378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47146 |
vulnerable | 2026-07-29 00:54:59.857036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47145 |
vulnerable | 2026-07-29 00:54:59.848031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.