CVE-2024-22472CWE-120

Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow

High · published May 7, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution

This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2

running on Silicon Labs 500 series Z-wave devices.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00777 · 55.4th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-05-07T05:17Z
EPSS history
Timeline
  • 07 MAY 05:17Z
    Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
    cvelistv5