silabs.com Ember ZNet vulnerabilities

Latest silabs.com Ember ZNet CVEs

Newest publication first

1. CVE-2022-24939 Malformed Zigbee packet with invalid destination address causes Assert

   Published 2022-11-17

   Medium·CVSS 6.5 EPSS 0.35%

   A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.

2. CVE-2022-24938 Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier

   Published 2022-11-14

   High·CVSS 7.5 EPSS 0.83%

   A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.