CVE-2026-47152
Undergoing Analysis Undergoing Analysis - In Progress
EmberZNet Stack Divide-by-Zero in Level Control Move Command

Publication date: 2026-06-25

Last updated on: 2026-06-25

Assigner: Silicon Graphics (SGI)

Description
In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-25
Last Modified
2026-06-25
Generated
2026-06-25
AI Q&A
2026-06-25
EPSS Evaluated
N/A
NVD
CVE-2026-47152
EUVD
EUVD-2026-39407
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
silicon_labs emberznet to 9.0.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-369 The product divides a value by zero.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in EmberZNet version 9.0.2 and earlier. It occurs when a malformed Level Control Move command is sent, which can cause the process to terminate due to a divide-by-zero fault. The command must originate from a device that has already joined the network, and only devices that support the Level Control cluster are potentially affected.

Impact Analysis

The vulnerability can cause the affected process to terminate unexpectedly, leading to a denial of service condition. This could disrupt normal operation of devices using EmberZNet that support the Level Control cluster, potentially impacting device availability and reliability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47152. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart