What’s Vulnerable › Products
Silicon Labs EmberZNet vulnerabilities
25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.
Check whether your Silicon Labs EmberZNet version is affected
Latest Silicon Labs EmberZNet vulnerabilities
- CVE-2026-94502 — Out-of-bounds write in Zigbee Publish Price Matrix handling (CVSS 7.5)
- CVE-2026-85080 — Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling (CVSS 6.0)
- CVE-2026-85079 — Out-of-bounds write in Zigbee Simple_Desc_req handling (CVSS 7.5)
- CVE-2026-66282 — Authenticated Denial-of-Service in Zigbee Publish Billing Period (CVSS 6.0)
- CVE-2026-66281 — Authenticated Denial-of-Service in Zigbee Discover Attributes Handling (CVSS 6.0)
- CVE-2026-6432 — Improper bounds validation in EmberZNet SDK (CVSS 5.3)
- CVE-2026-4526 — Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2026-47154 — Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2026-47153 — Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2026-47152 — Level Control Move divide-by-zero in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2026-47151 — Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 (CVSS 7.1)
- CVE-2026-47150 — IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 (CVSS 7.1)
- CVE-2026-47149 — Door Lock GetUserType invalid table index in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2026-47148 — Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2026-47147 — OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 (CVSS 7.1)
- CVE-2026-47146 — Color Control color-temperature assertion abort in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2026-47145 — Color Control hue/saturation assertion abort in EmberZNet v9.0.2 (CVSS 6.5)
- CVE-2024-7322 — Dos in ZigBee device due to unsolicited encrypted rejoin response (CVSS 5.8)
- CVE-2024-10106 — Ember ZNet buffer overflow in 'packet handoff' plugin (CVSS 3.7)
- CVE-2023-51394 — Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash (CVSS 7.5)
- CVE-2023-51393 — Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer (CVSS 7.5)
- CVE-2023-51392 — Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM (CVSS 9.8)
- CVE-2023-41094 — Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet (CVSS 9.8)
- CVE-2022-24938 — Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier (CVSS 7.5)
- CVE-2022-24937 — Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier (CVSS 9.8)