EM
Product
Emberznet
22
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 6High 8Medium 8Low 0
Watch
Add Emberznet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85079 | 9.8 | Oct 22 | Out-of-bounds write in Zigbee Simple_Desc_req handling Affected: through 9.1.1 |
| CVE-2026-94502 | 9.8 | Oct 22 | Out-of-bounds write in Zigbee Publish Price Matrix handling Affected: through 9.1.1 |
| CVE-2023-51392 | 9.8 | Feb 23 | Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM Affected: 7.2.0 through 7.2.4 |
| CVE-2023-41094 | 9.8 | Oct 4 | TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a… Affected: 7.1.3 through 7.1.5; 7.2.0 through 7.2.3 |
| CVE-2022-24937 | 9.8 | Nov 14 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers Affected: 1.0.0 |
| CVE-2026-85080 | 9.1 | Oct 22 | Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling Affected: through 9.1.1 |
| CVE-2026-66282 | 7.5 | Oct 22 | Authenticated Denial-of-Service in Zigbee Publish Billing Period Affected: through 9.1.1 |
| CVE-2026-66281 | 7.5 | Oct 22 | Authenticated Denial-of-Service in Zigbee Discover Attributes Handling Affected: through 9.1.1 |
| CVE-2023-51393 | 7.5 | Feb 23 | Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer Affected: before 7.4.0 |
| CVE-2023-51394 | 7.5 | Feb 23 | Potential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash Affected: before 7.4.0 |
| CVE-2022-24938 | 7.5 | Nov 14 | A malformed packet causes a stack overflow in the Ember ZNet stack Affected: 1.0.0 |
| CVE-2026-47151 | 7.1 | Jun 25 | Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47150 | 7.1 | Jun 25 | IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 Affected: through 9.0.2 |
| CVE-2026-47147 | 7.1 | Jun 25 | OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47154 | 6.5 | Jun 25 | Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47153 | 6.5 | Jun 25 | Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47152 | 6.5 | Jun 25 | Level Control Move divide-by-zero in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47149 | 6.5 | Jun 25 | Door Lock GetUserType invalid table index in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47148 | 6.5 | Jun 25 | Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47146 | 6.5 | Jun 25 | Color Control color-temperature assertion abort in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-47145 | 6.5 | Jun 25 | Color Control hue/saturation assertion abort in EmberZNet v9.0.2 Affected: through 9.0.2 |
| CVE-2026-4526 | 6.5 | Jun 25 | Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 Affected: through 9.0.2 |
Showing 22
