Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

EmberZNet — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in EmberZNet, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the EmberZNet Zigbee networking stack developed by Silicon Labs. The collection encompasses a comprehensive range of weaknesses including memory corruption, authentication bypasses, and cryptographic flaws identified between 2015 and the present. Visitors can utilize this resource to track the vendor's historical security advisories, analyze the prevalence of specific weakness classes within embedded IoT firmware, or review the complete vulnerability history of the EmberZNet product line. The data is compiled from public disclosures and official vendor notifications to provide a centralized view of security risks. By examining the trends and details presented here, security professionals and developers can better understand the evolution of threats targeting Zigbee implementations. This aggregation supports proactive risk assessment and aids in the development of robust mitigation strategies for devices relying on this communication protocol. The information remains strictly factual and is updated regularly to reflect the latest findings in the cybersecurity community. Users seeking to harden their Zigbee deployments will find this repository essential for maintaining an accurate inventory of potential exposure points. No specific CVE identifiers are listed in this summary, but the full database provides direct links to detailed technical reports for each entry.

Vendor: silabs.com

CVE ID Title CVSS Severity Published
CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling CWE-121 7.5 High 2026-10-22
CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling CWE-121 7.5 High 2026-10-22
CVE-2026-66282 Authenticated Denial-of-Service in Zigbee Publish Billing Period CWE-674 6.0 Medium 2026-10-22
CVE-2026-66281 Authenticated Denial-of-Service in Zigbee Discover Attributes Handling CWE-835 6.0 Medium 2026-10-22
CVE-2026-85080 Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling CWE-121 6.0 Medium 2026-10-22
CVE-2026-6432 Improper bounds validation in EmberZNet SDK CWE-130 5.3 Medium 2026-06-25
CVE-2026-47154 Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 CWE-125 - - 2026-06-25
CVE-2026-47153 Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 CWE-369 - - 2026-06-25
CVE-2026-47152 Level Control Move divide-by-zero in EmberZNet v9.0.2 CWE-369 - - 2026-06-25
CVE-2026-47151 Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 CWE-787 - - 2026-06-25
CVE-2026-47150 IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 CWE-787 - - 2026-06-25
CVE-2026-47149 Door Lock GetUserType invalid table index in EmberZNet v9.0.2 CWE-125 - - 2026-06-25
CVE-2026-47148 Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 CWE-125 - - 2026-06-25
CVE-2026-47147 OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 CWE-125 - - 2026-06-25
CVE-2026-47146 Color Control color-temperature assertion abort in EmberZNet v9.0.2 CWE-617 - - 2026-06-25
CVE-2026-47145 Color Control hue/saturation assertion abort in EmberZNet v9.0.2 CWE-617 - - 2026-06-25
CVE-2026-4526 Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 CWE-125 - - 2026-06-25
CVE-2024-7322 Dos in ZigBee device due to unsolicited encrypted rejoin response CWE-940 5.8 Medium 2025-01-15

All 18 known CVE vulnerabilities affecting EmberZNet with full Chinese analysis, references, and POCs where available.