CVE-2025-10933: Out-of-bounds Read

An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads...

CVE-2024-50921

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service DoS via repeatedly sending crafted packets to the controller...

CVE-2024-50930

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code...

CVE-2023-51395

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

CVE-2024-50930

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code...

PT-2024-34457 · Silicon · Z-Wave Series 700/800

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: The issue is related to insecure permissions in the affected software, allowing attackers to disrupt communications between the controller and the device by repeatedly...

CVE-2024-50930: Improper Preservation of Permissions

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code...

CVE-2024-50928: Improper Preservation of Permissions

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...

CVE-2024-50924: Improper Preservation of Permissions

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...

CVE-2024-50931

Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions...

CVE-2024-50921: Improper Preservation of Permissions

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service DoS via repeatedly sending crafted packets to the controller...

PT-2024-34459 · Silicon · Z-Wave Series 700 +1

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: Insecure permissions in the software allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service DoS...

CVE-2024-50931: Improper Preservation of Permissions

Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions...

CVE-2024-50920: Improper Preservation of Permissions

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...

CVE-2024-50929: Improper Preservation of Permissions

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service DoS...

CVE-2024-50930

An issue in Silicon Labs Z-Wave Series 500 version v6.84.0 allows an attacker to execute arbitrary code . The documents do not provide specific technical details regarding the root cause or the specific component involved. To mitigate this risk, it is recommended to update to a newer version that...

Design/Logic Flaw

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

CVE-2023-51395: Out-of-bounds Write

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

CVE-2023-5310: Uncaught Exception

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device...

CVE-2022-24611: Undefined Security Weakness

Denial of Service DoS in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs...