Advisories · Technology
Silicon Labs EmberZNet.
Every CVE that names Silicon Labs EmberZNet among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Out-of-bounds write in Zigbee Simple_Desc_req handling
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Zigbee Publish Price Matrix handling
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 6.0 Medium
Authenticated Denial-of-Service in Zigbee Publish Billing Period
- Silicon Labs EmberZNet
- Denial of service
- CVSS 6.0 Medium
Authenticated Denial-of-Service in Zigbee Discover Attributes Handling
- Silicon Labs EmberZNet
- Denial of service
- CVSS 6.0 Medium
Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 5.3 Medium
Improper bounds validation in EmberZNet SDK
- Silicon Labs EmberZNet
- CWE-130
- CVSS 7.1 High
Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 7.1 High
Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Denial of service
- CVSS 7.1 High
Level Control Move divide-by-zero in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Denial of service
- CVSS 7.1 High
Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 7.1 High
IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 7.1 High
Door Lock GetUserType invalid table index in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 7.1 High
Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 7.1 High
OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Memory corruption
- CVSS 7.1 High
Color Control color-temperature assertion abort in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Denial of service
- CVSS 7.1 High
Color Control hue/saturation assertion abort in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Denial of service
- CVSS 7.1 High
Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
- Silicon Labs EmberZNet
- Memory corruption