VulnerabilityAnalyzed

CVE-2026-47148

These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed.

HIGH 7.1EPSS 0.44%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.44%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Groups cluster may be impacted.

CVSS 4.0: 7.1 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.44% probability · 37th percentile
CISA KEV: Not listed
Weakness: CWE-125
Affected: silabs/emberznet
Source: product-security@silabs.com

References

https://github.com/SiliconLabsSoftware/sisdk-release/Not Applicable
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000pEGPQIA4?operationContext=S1Permissions Required

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.