8.1
High
CVE-2024-22472 A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential…
Description
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Z-Wave SDK 6.85 | earliest → < 6.85.2 | 6.85.2 |
| z-wave_software_development_kit 6.85 | earliest → < 6.85.2 | 6.85.2 |
Other CVEs of Z-Wave SDK
The 4 CVEs of Z-Wave SDK →
CVE-2026-89410
In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive…
5.1
Medium
CVE-2026-89409
In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing…
5.3
Medium
CVE-2023-51395
The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices
8.8
High