Vulnerability Details CVE-2026-47147
In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read back to the requester. The size and location of this data is limited. These requests must come from a device that has already joined the network. Only devices supporting the OTA Server cluster may be impacted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.8%
CVSS Severity
CVSS v3 Score 7.1
References
Products affected by CVE-2026-47147
-
cpe:2.3:a:silabs:emberznet:1.0.0
-
cpe:2.3:a:silabs:emberznet:7.1.3
-
cpe:2.3:a:silabs:emberznet:7.1.5
-
cpe:2.3:a:silabs:emberznet:7.2.0
-
cpe:2.3:a:silabs:emberznet:7.2.3