CVE-2026-47152
Analyzed Analyzed - Analysis Complete

EmberZNet Stack Divide-by-Zero in Level Control Move Command

Vulnerability report for CVE-2026-47152, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-06-25

Last updated on: 2026-06-25

Assigner: Silicon Graphics (SGI)

Description

In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process through a divide-by-zero fault. This command must come from a device that has already joined the network. Only devices supporting the Level Control cluster may be impacted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-25
Last Modified
2026-06-25
Generated
2026-07-15
AI Q&A
2026-06-25
EPSS Evaluated
2026-07-14
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
silabs emberznet to 9.0.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-369 The product divides a value by zero.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in EmberZNet version 9.0.2 and earlier. It occurs when a malformed Level Control Move command is sent, which can cause the process to terminate due to a divide-by-zero fault. The command must originate from a device that has already joined the network, and only devices that support the Level Control cluster are potentially affected.

Impact Analysis

The vulnerability can cause the affected process to terminate unexpectedly, leading to a denial of service condition. This could disrupt normal operation of devices using EmberZNet that support the Level Control cluster, potentially impacting device availability and reliability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47152. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart