In EmberZNet versions 9.0.2 and earlier, processing a malformed Level Control Step command can cause a divide-by-zero fault, resulting in process termination. The command must originate from a device that has joined the network, and only devices supporting the Level Control cluster are impacted. This vulnerability is tracked as CWE-369 (Divide by Zero) and has a CVSS 4.0 base score of 7.1, indicating high severity. No official patch or remediation level has been published by Silicon Labs as of the data provided.

Successful exploitation causes the affected process to terminate due to a divide-by-zero fault, potentially leading to denial of service on devices running EmberZNet with the Level Control cluster. There is no indication of privilege escalation or remote code execution. The vulnerability requires the attacker to have network access and to be a joined device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit network access to trusted devices and monitor for malformed Level Control Step commands from joined devices. No official remediation or temporary fix has been provided by Silicon Labs at this time.