CVE-2023-5310

CVE-2023-5310 describes a denial-of-service vulnerability affecting Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. The issue arises when devices on the network receive a stream of packets, leading to availability impact. Affected com...

CVE-2024-50928

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow an attacker to modify the wakeup interval of end devices within the controller's memory. This vulnerability, caused by insecure privilege management, results in the disruption of communications between the end d...

CVE-2024-50931

The Silicon Labs Z-Wave Series 500 (specifically version 6.84.0 ) contains a vulnerability characterized by insecure permissions within the software. This configuration flaw can lead to a high impact on availability as indicated by the CVSS 3.1 score (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). While n...

CVE-2024-50930

The Silicon Labs Z-Wave Series 500 (specifically v6.84.0 ) is vulnerable to an issue that allows an attacker to execute arbitrary code . The vulnerability is associated with CWE-281 (Improper Preservation of Permissions). To remediate this issue, users are recommended to update to a newer version...

CVE-2024-50921

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow an attacker to trigger a Denial of Service (DoS) by repeatedly sending crafted packets to the controller. The root cause is attributed to insecure privilege management. As a temporary workaround, it is recommend...

CVE-2024-50920

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow an attacker to create a fake node by supplying crafted packets . This vulnerability stems from insecure privilege management within the software. To mitigate risk, it is recommended to restrict access to node cr...

CVE-2024-50924

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow an attacker to disrupt communications between the controller and the device. This is achieved by repeatedly sending crafted packets to the controller. To minimize risk, it is recommended to restrict access to th...

CVE-2024-50929

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow an attacker to arbitrarily change the device type in the controller's memory. This vulnerability can lead to a Denial of Service (DoS) . While the documents do not provide a specific patch version, it is recomme...