CVE-2024-50924

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/CNK2100/2024-CVE/blob/main/README.md	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:::::::*
	cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:::::::*
	cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:::::::*
	cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:::::::*
	cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:::::::*
	cpe:2.3:h:silabs:efr32zg23b010f512im40:-:::::::*
	cpe:2.3:h:silabs:efr32zg23b010f512im48:-:::::::*
	cpe:2.3:h:silabs:efr32zg23b011f512im40:-:::::::*
	cpe:2.3:h:silabs:efr32zg23b020f512im40:-:::::::*
	cpe:2.3:h:silabs:efr32zg23b020f512im48:-:::::::*
	cpe:2.3:h:silabs:efr32zg23b021f512im40:-:::::::*
	cpe:2.3:h:silabs:zgm130s037hgn:-:::::::*
	cpe:2.3:h:silabs:zgm230sa27hgn:-:::::::*
	cpe:2.3:h:silabs:zgm230sb27hgn:-:::::::*

History

No history.

Information

Published : 2024-12-10 19:15

Updated : 2025-07-01 15:28

NVD link : CVE-2024-50924

Mitre link : CVE-2024-50924

CVE.ORG link : CVE-2024-50924

JSON object : View

Products Affected

silabs

zgm230sb27hgn
zgm230sa27hgn
efr32zg23b010f512im40
efr32zg23a020f512gm40
zgm130s037hgn
efr32zg23b010f512im48
efr32zg23b020f512im40
efr32zg23b021f512im40
efr32zg23a010f512gm40
efr32zg23b020f512im48
efr32zg23b011f512im40
z-wave_software_development_kit
efr32zg14p231f256gm32
efr32zg23a010f512gm48
efr32zg23a020f512gm48

CWE

CWE-281

Improper Preservation of Permissions

{"id": "CVE-2024-50924", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-12-10T19:15:30.463", "references": [{"url": "https://github.com/CNK2100/2024-CVE/blob/main/README.md", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-281"}]}], "descriptions": [{"lang": "en", "value": "Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller."}, {"lang": "es", "value": "Los permisos inseguros en Silicon Labs (SiLabs) Z-Wave Series 700 y 800 v7.21.1 permiten a los atacantes interrumpir las comunicaciones entre el controlador y el dispositivo en s\u00ed mediante el env\u00edo repetido de paquetes manipulados al controlador."}], "lastModified": "2025-07-01T15:28:52.527", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3939A08E-08C2-46E4-A78E-0D8DC840F414", "versionEndIncluding": "7.21.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E2DFB610-ABC0-4BF9-AB1B-EBE6919306A1"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A25C5C4-EC69-4A14-9DBC-43CF3575D42A"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE85974A-943D-4F65-83C7-2F348EFB8D73"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E572162D-C2AF-4859-BA1F-44312C441964"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "53BC1B3E-F501-48D4-8677-9DA3E0FAA1DD"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9C6FF1AE-BD40-42F4-BFA6-3EAB981B53A3"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "80565B28-70B9-4085-AA23-9FFAA32847A3"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EF915B76-59C2-48E3-A718-95D8EBF30DC4"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4BF75E38-325F-4E8F-AA55-5D68C1C81B6F"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "13584AB6-3E8C-417C-A713-AD2BC826C1DB"}, {"criteria": "cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D96B8612-8818-40B4-BB02-3E29C5A8EBFF"}, {"criteria": "cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "57708CEA-8CF3-4FAF-A7D4-8572EE7A7E53"}, {"criteria": "cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "93C8AAF3-390E-4755-BEB3-789AECE5A04E"}, {"criteria": "cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5794CE0B-4A2F-439F-A6DF-42A710E35D89"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}