CVE-2022-24611

Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.
References
Link Resource
http://z-wave.com Not Applicable
https://github.com/ITSecLab-HSEL/CVE-2022-24611 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:silabs:zm5202_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zm5202:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:silabs:zm5101_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zm5101:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:silabs:sd3503_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:sd3503:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:silabs:sd3502_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:sd3502:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:silabs:zm5304_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zm5304:-:*:*:*:*:*:*:*

History

26 May 2022, 15:16

Type Values Removed Values Added
CPE cpe:2.3:h:silabs:zm5202:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:zm5101_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:zm5202_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:sd3503_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zm5101:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:sd3502:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:zm5304_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:sd3502_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zm5304:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:sd3503:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 6.1
v3 : 6.5
CWE NVD-CWE-noinfo
References (MISC) https://github.com/ITSecLab-HSEL/CVE-2022-24611 - (MISC) https://github.com/ITSecLab-HSEL/CVE-2022-24611 - Third Party Advisory
References (MISC) http://z-wave.com - (MISC) http://z-wave.com - Not Applicable

17 May 2022, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-05-17 18:15

Updated : 2024-02-04 22:29


NVD link : CVE-2022-24611

Mitre link : CVE-2022-24611

CVE.ORG link : CVE-2022-24611


JSON object : View

Products Affected

silabs

  • zm5101_firmware
  • sd3502
  • sd3503
  • sd3502_firmware
  • sd3503_firmware
  • zm5304_firmware
  • zm5202
  • zm5101
  • zm5304
  • zm5202_firmware