Vulnerabilities in Silicon Labs

65 results
CVE-2013-20003—Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowEPSS 0.6%CVE-2020-9060—Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZENEPSS 0.6%CVE-2024-23973HIGHSilicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer OverflowEPSS 0.5%CVE-2026-85080MEDIUMAuthenticated Denial-of-Service in Zigbee GetGroupMembership HandlingEPSS 0.5%CVE-2025-2837HIGHSilicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-24731HIGHSilicon Labs Gecko OS http_download Stack-based Buffer OverflowEPSS 0.5%CVE-2026-6924HIGHWeak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt pathEPSS 0.4%CVE-2020-9057—Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range toEPSS 0.4%CVE-2026-47153HIGHLevel Control Step With On/Off divide-by-zero in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47148HIGHGroups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47149HIGHDoor Lock GetUserType invalid table index in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47145HIGHColor Control hue/saturation assertion abort in EmberZNet v9.0.2EPSS 0.4%CVE-2026-4526HIGHGlobal ZCL command parser missing minimum-length validation in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47154HIGHSimple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47146HIGHColor Control color-temperature assertion abort in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47152HIGHLevel Control Move divide-by-zero in EmberZNet v9.0.2EPSS 0.4%CVE-2023-3110CRITICALBuffer overflow in S0 Decryption on Unify GatewayEPSS 0.4%CVE-2026-47147HIGHOTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2EPSS 0.4%CVE-2023-4041CRITICALSecond Stage Gecko Bootloader GBL Parser Buffer Overrun VulnerabilityEPSS 0.4%CVE-2026-5706HIGHBuffer overflow in Bluetooth Mesh SDK when handling extended advertisementsEPSS 0.4%