MediumCVSS 4.6
EPSS 0.22%
Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions.
Product
silabs z-wave software development kit vulnerabilities
10 published CVES affecting silabs z-wave software development kit, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 10
- Critical
- 0
- High
- 4
- Medium
- 6
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest silabs z-wave software development kit CVEs
Newest publication first
-
-
MediumCVSS 6.5 EPSS 0.40%
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller.
-
HighCVSS 8.8 EPSS 0.46%
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets.
-
MediumCVSS 6.5 EPSS 0.36%
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller.
-
HighCVSS 8.8 EPSS 0.30%
An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.
-
MediumCVSS 6.2 EPSS 0.22%
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service (DoS).
-
MediumCVSS 6.5 EPSS 0.40%
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repeatedly sending crafted packets to the controller.
-
CVE-2024-22472 Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
PublishedHighCVSS 8.1 EPSS 0.78%A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices.
-
HighCVSS 8.8 EPSS 0.34%
The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
-
MediumCVSS 6.5 EPSS 0.35%
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.