CVE-2026-85079: falha de alta gravidade em Silicon Labs EmberZNet
Out-of-bounds write in Zigbee Simple_Desc_req handling
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.7%
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can be performed.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Silicon Labs · EmberZNetCVEs relacionadas — Silicon Labs EmberZNet
No mesmo produto, das mais perigosas para as menos.
CVE-2026-94502HIGHOut-of-bounds write in Zigbee Publish Price Matrix handlingEPSS 0.7%CVE-2026-6432MEDIUMImproper bounds validation in EmberZNet SDKEPSS 0.6%CVE-2026-85080MEDIUMAuthenticated Denial-of-Service in Zigbee GetGroupMembership HandlingEPSS 0.5%CVE-2026-47154HIGHSimple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47153HIGHLevel Control Step With On/Off divide-by-zero in EmberZNet v9.0.2EPSS 0.4%CVE-2026-47152HIGHLevel Control Move divide-by-zero in EmberZNet v9.0.2EPSS 0.4%