Z Wave Sdk
Monthly
Out-of-bounds reads in Silicon Labs Z-Wave SDK 8.1.1 and earlier allow an attacker with board-level access to the NCP SPI bus to leak sensitive memory contents from the device, rated CVSS 4.0 5.1. The flaw is not reachable over the Z-Wave RF mesh or any IP network: the assessed vector (AV:P/AC:L/PR:N/UI:N, C:H/I:N/A:N) requires physically attaching to the serial SPI interface between the host MCU and the Z-Wave radio and issuing a malformed command, which makes it a moderate, access-gated disclosure risk rather than a remotely exploitable emergency. No public exploit code has been identified at time of analysis, and no CISA KEV entry is associated with this issue; priority is tracked as remediation within the current month.
Silicon Labs' Z-Wave SDK accepts crafted ZWAVE_CMD_NODES_EXIST messages without adequate source verification, allowing nodes to be removed from a Z-Wave mesh network. Only devices that have already joined the network can send such messages, so the realistic attacker is a compromised or malicious paired node rather than an arbitrary remote party. The flaw affects SDK 8.1.1 and earlier on 700/800 series devices and 6.85.02 and earlier on 500 series devices; it is rated 5.3 (CVSS 4.0) with low integrity and availability impact, no confidentiality impact, and no public exploit identified at time of analysis.
Out-of-bounds reads in Silicon Labs Z-Wave SDK 8.1.1 and earlier allow an attacker with board-level access to the NCP SPI bus to leak sensitive memory contents from the device, rated CVSS 4.0 5.1. The flaw is not reachable over the Z-Wave RF mesh or any IP network: the assessed vector (AV:P/AC:L/PR:N/UI:N, C:H/I:N/A:N) requires physically attaching to the serial SPI interface between the host MCU and the Z-Wave radio and issuing a malformed command, which makes it a moderate, access-gated disclosure risk rather than a remotely exploitable emergency. No public exploit code has been identified at time of analysis, and no CISA KEV entry is associated with this issue; priority is tracked as remediation within the current month.
Silicon Labs' Z-Wave SDK accepts crafted ZWAVE_CMD_NODES_EXIST messages without adequate source verification, allowing nodes to be removed from a Z-Wave mesh network. Only devices that have already joined the network can send such messages, so the realistic attacker is a compromised or malicious paired node rather than an arbitrary remote party. The flaw affects SDK 8.1.1 and earlier on 700/800 series devices and 6.85.02 and earlier on 500 series devices; it is rated 5.3 (CVSS 4.0) with low integrity and availability impact, no confidentiality impact, and no public exploit identified at time of analysis.