CVE-2024-50920

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50920
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/CNK2100/2024-CVE/blob/main/README.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
OR cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*
History

01 Jul 2025, 15:28

Type Values Removed Values Added
References () https://github.com/CNK2100/2024-CVE/blob/main/README.md - () https://github.com/CNK2100/2024-CVE/blob/main/README.md - Exploit, Third Party Advisory
First Time Silabs efr32zg23b010f512im40
Silabs z-wave Software Development Kit
Silabs efr32zg23b011f512im40
Silabs efr32zg23a010f512gm48
Silabs efr32zg14p231f256gm32
Silabs efr32zg23b021f512im40
Silabs efr32zg23a010f512gm40
Silabs efr32zg23b020f512im48
Silabs efr32zg23b010f512im48
Silabs efr32zg23a020f512gm48
Silabs efr32zg23a020f512gm40
Silabs
Silabs efr32zg23b020f512im40
Silabs zgm130s037hgn
Silabs zgm230sb27hgn
Silabs zgm230sa27hgn
CPE cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*

11 Dec 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-10 19:15

Updated : 2025-07-01 15:28

NVD link : CVE-2024-50920

Mitre link : CVE-2024-50920

CVE.ORG link : CVE-2024-50920

JSON object : View

Products Affected

silabs

  • efr32zg23b020f512im48
  • efr32zg23a010f512gm48
  • zgm230sa27hgn
  • efr32zg23b010f512im48
  • zgm230sb27hgn
  • efr32zg23b021f512im40
  • z-wave_software_development_kit
  • efr32zg14p231f256gm32
  • zgm130s037hgn
  • efr32zg23b011f512im40
  • efr32zg23a020f512gm48
  • efr32zg23b010f512im40
  • efr32zg23b020f512im40
  • efr32zg23a020f512gm40
  • efr32zg23a010f512gm40
CWE
CWE-281

Improper Preservation of Permissions