CVE-2024-50921

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50921
Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repeatedly sending crafted packets to the controller.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/CNK2100/2024-CVE/blob/main/README.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
OR cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*
History

01 Jul 2025, 15:28

Type Values Removed Values Added
References () https://github.com/CNK2100/2024-CVE/blob/main/README.md - () https://github.com/CNK2100/2024-CVE/blob/main/README.md - Exploit, Third Party Advisory
First Time Silabs efr32zg14p231f256gm32
Silabs efr32zg23a020f512gm40
Silabs efr32zg23b021f512im40
Silabs efr32zg23b020f512im48
Silabs zgm230sa27hgn
Silabs efr32zg23a010f512gm48
Silabs
Silabs zgm230sb27hgn
Silabs efr32zg23b010f512im40
Silabs efr32zg23b010f512im48
Silabs efr32zg23b011f512im40
Silabs zgm130s037hgn
Silabs efr32zg23b020f512im40
Silabs efr32zg23a020f512gm48
Silabs z-wave Software Development Kit
Silabs efr32zg23a010f512gm40
CPE cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*
cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*

12 Dec 2024, 02:06

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
Summary
  • (es) Los permisos inseguros en Silicon Labs (SiLabs) Z-Wave Series 700 y 800 v7.21.1 permiten a los atacantes provocar una denegación de servicio (DoS) mediante el envío repetido de paquetes manipulados al controlador.
CWE CWE-281

10 Dec 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-10 19:15

Updated : 2025-07-01 15:28

NVD link : CVE-2024-50921

Mitre link : CVE-2024-50921

CVE.ORG link : CVE-2024-50921

JSON object : View

Products Affected

silabs

  • efr32zg23a010f512gm48
  • efr32zg23b020f512im48
  • efr32zg23b010f512im48
  • efr32zg23b020f512im40
  • efr32zg23a010f512gm40
  • efr32zg23b021f512im40
  • efr32zg23b010f512im40
  • efr32zg23b011f512im40
  • efr32zg23a020f512gm48
  • efr32zg23a020f512gm40
  • efr32zg14p231f256gm32
  • zgm130s037hgn
  • z-wave_software_development_kit
  • zgm230sa27hgn
  • zgm230sb27hgn
CWE
CWE-281

Improper Preservation of Permissions