Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read back to the requester. The size and location of this data is limited. These requests must come from a device that has already joined the network. Only devices supporting the OTA Server cluster may be impacted.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH Severity: CVE-2026-47147 (CVSS 7.1) EmberZNet ≤v9[.]0[.]2 OTA server vulnerable to out-of-bounds reads via malformed requests. RAM data exposure risk. Affects devices with OTA Server cluster. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/34m8clP3m5
Post summary
The post alerts of CVE‑2026‑47147 in EmberZNet OTA servers, noting out‑of‑bounds read weaknesses that could expose RAM data, and urges immediate patching.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | silabs | emberznet | - | - | - |