What’s Vulnerable › Vulnerabilities
CVE-2024-22472: Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-05-07 · updated 2026-06-17
- Weakness: CWE-120
Description
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices.
Affected products
- Silabs Z-Wave Software Development Kit: before 6.85.2 — fixed in 6.85.2
How to fix
Upgrade to a fixed version: Silabs Z-Wave Software Development Kit 6.85.2. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-22472 or the next vulnerability affects your stack