CVE-2026-47147 Silicon Labs CVE debrief

Who should care

Defenders responsible for IoT devices using EmberZNet, particularly those supporting the OTA Server cluster, should assess exposure and verify affected versions. This includes IoT device operators, security teams, and vulnerability management teams. The vulnerability has a high CVSS score of 7.1, indicating a significant risk to affected systems. Defenders should prioritize verifying affected versions and assessing exposure to mitigate potential impacts.

Why it matters

The vulnerability in EmberZNet has a high CVSS score of 7.1 and affects devices that have joined the network and support the OTA Server cluster. Defenders should prioritize verifying affected versions and assessing exposure.

• Verify affected versions of EmberZNet to determine exposure
• Assess network configurations to limit access to the OTA Server cluster
• Monitor network activity for potential exploitation attempts
• Update OTA Server cluster configurations to prevent data leaks

Technical summary

The vulnerability in EmberZNet v9.0.2 and earlier allows malformed OTA requests to cause out-of-bounds reads, potentially leaking limited RAM data to the requester. This issue affects devices that have joined the network and support the OTA Server cluster. The vulnerability has a high CVSS score of 7.1, indicating a significant risk to affected systems. The technical impact is limited to devices that support the OTA Server cluster and have joined the network. Defenders should prioritize verifying affected versions and assessing exposure to mitigate potential impacts.

Defensive priority

Defenders should prioritize verifying affected versions and assessing exposure, as the vulnerability has a high CVSS score of 7.1.

Recommended defensive actions

• Verify affected versions of EmberZNet and assess exposure
• Implement network monitoring to detect potential exploitation attempts
• Review and update OTA Server cluster configurations to limit access
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions. The CVE record was published on 2026-06-25T14:16:40.810Z and has not been modified since then. The vulnerability affects EmberZNet v9.0.2 and earlier, and defenders should verify affected versions and assess exposure. The evidence is limited to publicly available information from the CVE Program and NVD.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.