CVE-2026-47147

Katalog CVE

CVSS 7.1 · High EPSS 0,40%

Kerentanan Out-of-bounds Read pada silabs emberznet. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read back to the requester. The size and location of this data is limited. These requests must come from a device that has already joined the network. Only devices supporting the OTA Server cluster may be impacted.

Rincian

Terbit di NVD

25 Juni 2026

Terakhir diubah

25 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/SiliconLabsSoftware/sisdk-release/ not applicable
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000pEGPQIA4?operationCon... permissions required