CVE-2024-50920

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50920
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/CNK2100/2024-CVE/blob/main/README.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
OR cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*
History

01 Jul 2025, 15:28

Type Values Removed Values Added
First Time Silabs z-wave Software Development Kit
Silabs efr32zg23b010f512im48
Silabs efr32zg23a020f512gm40
Silabs efr32zg23b010f512im40
Silabs efr32zg23a010f512gm40
Silabs zgm230sa27hgn
Silabs efr32zg23b021f512im40
Silabs efr32zg23a010f512gm48
Silabs efr32zg23b020f512im40
Silabs zgm130s037hgn
Silabs efr32zg14p231f256gm32
Silabs efr32zg23a020f512gm48
Silabs efr32zg23b011f512im40
Silabs efr32zg23b020f512im48
Silabs zgm230sb27hgn
Silabs
Summary
  • (es) Los permisos inseguros en Silicon Labs (SiLabs) Z-Wave Series 700 y 800 v7.21.1 permiten a los atacantes crear un nodo falso mediante el suministro de paquetes manipulados.
CPE cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*
References () https://github.com/CNK2100/2024-CVE/blob/main/README.md - () https://github.com/CNK2100/2024-CVE/blob/main/README.md - Exploit, Third Party Advisory

11 Dec 2024, 16:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
CWE CWE-281

10 Dec 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-10 19:15

Updated : 2025-07-01 15:28

NVD link : CVE-2024-50920

Mitre link : CVE-2024-50920

CVE.ORG link : CVE-2024-50920

JSON object : View

Products Affected

silabs

  • efr32zg23a020f512gm40
  • efr32zg23b010f512im48
  • efr32zg23a010f512gm40
  • zgm230sa27hgn
  • efr32zg14p231f256gm32
  • efr32zg23b010f512im40
  • efr32zg23a010f512gm48
  • zgm130s037hgn
  • efr32zg23b021f512im40
  • efr32zg23b011f512im40
  • efr32zg23a020f512gm48
  • zgm230sb27hgn
  • efr32zg23b020f512im40
  • efr32zg23b020f512im48
  • z-wave_software_development_kit
CWE
CWE-281

Improper Preservation of Permissions