CVE-2026-47145 Silicon Labs CVE debrief

Who should care

Defenders responsible for network device configurations and security, particularly those with Color Control cluster supporting devices, should assess exposure and potential impact.

Why it matters

Defenders should prioritize verifying exposure of Color Control cluster supporting devices on their network and assess the potential impact of malformed Color Control messages.

• Verification of Color Control cluster supporting devices on the network
• Assessment of potential impact of malformed Color Control messages
• Review of network device configurations for Color Control cluster support

Technical summary

Malformed Color Control messages can lead to asserts that terminate the process in EmberZNet v9.0.2 and earlier. These messages must come from a device that has already joined the network and only devices supporting the Color Control cluster may be impacted. The vulnerability requires verification of Color Control cluster supporting devices on the network and assessment of potential impact of malformed Color Control messages. Defenders should prioritize verifying exposure of Color Control cluster supporting devices on their network and assess the potential impact of malformed Color Control messages.

Defensive priority

Defenders should prioritize verifying exposure of Color Control cluster supporting devices on their network and assess the potential impact of malformed Color Control messages.

Recommended defensive actions

• Verify exposure of Color Control cluster supporting devices on the network
• Assess potential impact of malformed Color Control messages
• Review network device configurations for Color Control cluster support
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, but do not specify versions beyond 9.0.2 or provide additional details on exploitation. The source reference also provides limited information on the vulnerability. Defenders should verify the exposure of Color Control cluster supporting devices on their network and assess the potential impact of malformed Color Control messages. The CVE Program record and NVD detail page provide official source-provided CVE metadata and source-specific NIST N

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.