Skip to main content

Z Wave Software Development Kit CVE-2024-50920

HIGH
Improper Preservation of Permissions (CWE-281)
2024-12-10 cve@mitre.org
Information Disclosure Z Wave Software Development Kit
8.8
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
8.8 HIGH
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 10, 2024 - 19:15 cve.org
HIGH 8.8

DescriptionCVE.org

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets.

AnalysisAI

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-281. Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets. Affected products include: Silabs Z-Wave Software Development Kit.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Z Wave Software Development Kit

View all
CVE-2024-50928 MEDIUM POC
6.5 Dec 10

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup int
CVE-2024-50924 MEDIUM POC
6.5 Dec 10

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communi
CVE-2024-50921 MEDIUM POC
6.5 Dec 10

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Ser
CVE-2024-50929 MEDIUM POC
6.2 Dec 10

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change th
CVE-2024-50930 HIGH
8.8 Dec 10

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code. Rated high severity (CVSS
CVE-2023-5310 MEDIUM
6.5 Dec 15

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v
CVE-2024-50931 MEDIUM
4.6 Dec 10

Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions. Rated medium severity (CVSS 4.6),

Same weakness CWE-281 – Improper Preservation of Permissions

View all
CVE-2017-8543 CRITICAL
9.8
CVE-2024-46310 CRITICAL POC
9.1
CVE-2017-8589 CRITICAL
9.8
CVE-2024-54879 CRITICAL POC
9.1
CVE-2024-41650 CRITICAL POC
9.8
CVE-2024-41649 CRITICAL POC
9.8
CVE-2024-41648 CRITICAL POC
9.8
CVE-2024-41646 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-50920 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy