CVE-2026-47145

MEDIUM CVSS 6.5 View on NVD ↗

Description

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the network. Only devices supporting the Color Control cluster may be impacted.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

silabs/emberznet

References

https://github.com/SiliconLabsSoftware/sisdk-release/
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000pEGPQIA4?operationContext=S1

Published: Jun 25, 2026 14:16 UTC Modified: Jun 25, 2026 18:46 UTC