Medium severity6.5NVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026
CVE-2026-47154
CVE-2026-47154
Description
In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Simple Metering cluster may be impacted.
Affected products
2- Range: <=9.0.2
Patches
Vulnerability mechanics
References
1- siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000pEGPQIA4nvdPermissions Required
News mentions
0No linked articles in our index yet.