« Volver al listado

CVE-2024-50928

Estado: AnalizadaMedia (6.5)—

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Silabs — Z-wave Software Development KIT

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-50928",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-50928",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-11T21:13:37.133914Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2024-12-10T19:15:30.550",
  "references": [
    {
      "url": "https://github.com/CNK2100/2024-CVE/blob/main/README.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-281"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller."
    },
    {
      "lang": "es",
      "value": "Los permisos inseguros en Silicon Labs (SiLabs) Z-Wave Series 700 y 800 v7.21.1 permiten a los atacantes cambiar el intervalo de activación de los dispositivos finales en la memoria del controlador, interrumpiendo las comunicaciones del dispositivo con el controlador."
    }
  ],
  "lastModified": "2026-06-17T08:05:09.393",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEF36372-E7C1-49F6-97C5-412CCD9771C3",
              "versionEndIncluding": "7.21.1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg14p231f256gm32:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E2DFB610-ABC0-4BF9-AB1B-EBE6919306A1"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a010f512gm40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8A25C5C4-EC69-4A14-9DBC-43CF3575D42A"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a010f512gm48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AE85974A-943D-4F65-83C7-2F348EFB8D73"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a020f512gm40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E572162D-C2AF-4859-BA1F-44312C441964"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23a020f512gm48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "53BC1B3E-F501-48D4-8677-9DA3E0FAA1DD"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b010f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9C6FF1AE-BD40-42F4-BFA6-3EAB981B53A3"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b010f512im48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "80565B28-70B9-4085-AA23-9FFAA32847A3"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b011f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EF915B76-59C2-48E3-A718-95D8EBF30DC4"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b020f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4BF75E38-325F-4E8F-AA55-5D68C1C81B6F"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b020f512im48:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "13584AB6-3E8C-417C-A713-AD2BC826C1DB"
            },
            {
              "criteria": "cpe:2.3:h:silabs:efr32zg23b021f512im40:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D96B8612-8818-40B4-BB02-3E29C5A8EBFF"
            },
            {
              "criteria": "cpe:2.3:h:silabs:zgm130s037hgn:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "57708CEA-8CF3-4FAF-A7D4-8572EE7A7E53"
            },
            {
              "criteria": "cpe:2.3:h:silabs:zgm230sa27hgn:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "93C8AAF3-390E-4755-BEB3-789AECE5A04E"
            },
            {
              "criteria": "cpe:2.3:h:silabs:zgm230sb27hgn:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5794CE0B-4A2F-439F-A6DF-42A710E35D89"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}