Vulnerability · Published May 7, 2024 · Assigned by Silabs
CVE-2024-22472Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
High 8.1
In plain English
A high-severity buffer overflow in Z-Wave SDK from Silicon Labs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.8%top 44.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Silicon Labs | Z-Wave SDK | 0 – before 6.85.2 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H