HIGH🇵🇱 Wersja polska

CVE-2024-50920

CVSS 8.8v3.1pub. 2024-12-10upd. 2025-07-01

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Silabs Efr32zg14p231f256gm32

    HW
    Silabs
    all versions

  • Silabs Efr32zg23a010f512gm40

    HW
    Silabs
    all versions

  • Silabs Efr32zg23a010f512gm48

    HW
    Silabs
    all versions

  • Silabs Efr32zg23a020f512gm40

    HW
    Silabs
    all versions

  • Silabs Efr32zg23a020f512gm48

    HW
    Silabs
    all versions

  • Silabs Efr32zg23b010f512im40

    HW
    Silabs
    all versions

  • Silabs Efr32zg23b010f512im48

    HW
    Silabs
    all versions

  • Silabs Efr32zg23b011f512im40

    HW
    Silabs
    all versions

  • Silabs Efr32zg23b020f512im40

    HW
    Silabs
    all versions

  • Silabs Efr32zg23b020f512im48

    HW
    Silabs
    all versions

  • Silabs Efr32zg23b021f512im40

    HW
    Silabs
    all versions

  • Silabs Zgm130s037hgn

    HW
    Silabs
    all versions

  • Silabs Zgm230sa27hgn

    HW
    Silabs
    all versions

  • Silabs Zgm230sb27hgn

    HW
    Silabs
    all versions

  • Silabs Z Wave Software Development Kit

    OS
    Silabs
    ≤ 7.21.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-50930HIGH8.8same product

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.

CVE-2018-25029HIGH8.1same product

The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, all...

CVE-2013-20003HIGH8.3same product

Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared n...

CVE-2024-50928MEDIUM6.5same product

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the ...

CVE-2024-50929MEDIUM6.2same product

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily...