« Volver al listado

CVE-2024-50924

Estado: AnalizadaMedia (6.5)—

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Silabs — Z-wave Software Development KIT

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-50924",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-50924",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-11T21:12:36.682819Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2024-12-10T19:15:30.463",
  "references": [
    {
      "url": "https://github.com/CNK2100/2024-CVE/blob/main/README.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-281"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller."
    },
    {
      "lang": "es",
      "value": "Los permisos inseguros en Silicon Labs (SiLabs) Z-Wave Series 700 y 800 v7.21.1 permiten a los atacantes interrumpir las comunicaciones entre el controlador y el dispositivo en sí mediante el envío repetido de paquetes manipulados al controlador."
    }
  ],
  "lastModified": "2026-06-17T08:05:09.240",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3939A08E-08C2-46E4-A78E-0D8DC840F414",
              "versionEndIncluding": "7.21.1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E2DFB610-ABC0-4BF9-AB1B-EBE6919306A1"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8A25C5C4-EC69-4A14-9DBC-43CF3575D42A"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AE85974A-943D-4F65-83C7-2F348EFB8D73"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E572162D-C2AF-4859-BA1F-44312C441964"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "53BC1B3E-F501-48D4-8677-9DA3E0FAA1DD"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9C6FF1AE-BD40-42F4-BFA6-3EAB981B53A3"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "80565B28-70B9-4085-AA23-9FFAA32847A3"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EF915B76-59C2-48E3-A718-95D8EBF30DC4"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4BF75E38-325F-4E8F-AA55-5D68C1C81B6F"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "13584AB6-3E8C-417C-A713-AD2BC826C1DB"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D96B8612-8818-40B4-BB02-3E29C5A8EBFF"
            },
            {
              "criteria": "cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "57708CEA-8CF3-4FAF-A7D4-8572EE7A7E53"
            },
            {
              "criteria": "cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "93C8AAF3-390E-4755-BEB3-789AECE5A04E"
            },
            {
              "criteria": "cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5794CE0B-4A2F-439F-A6DF-42A710E35D89"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}