CVE-2024-50929

Published: Dec 10, 2024Modified: Jun 17, 2026

6.2

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.5 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service (DoS).

Affected (1)

Products: Silabs: Z Wave Software Development Kit

Silabs

1 product

Z Wave Software Development Kit

Configuration A

1 vulnerable · 14 platform

Vulnerable Software	Affected Versions
Silabs Z Wave Software Development Kit	Up to 7.21.1

Running on/with	Platform Versions
Silabs Efr32zg14p231f256gm32	All versions
Silabs Efr32zg23a010f512gm40	All versions
Silabs Efr32zg23a010f512gm48	All versions
Silabs Efr32zg23a020f512gm40	All versions
Silabs Efr32zg23a020f512gm48	All versions
Silabs Efr32zg23b010f512im40	All versions
Silabs Efr32zg23b010f512im48	All versions
Silabs Efr32zg23b011f512im40	All versions
Silabs Efr32zg23b020f512im40	All versions
Silabs Efr32zg23b020f512im48	All versions
Silabs Efr32zg23b021f512im40	All versions
Silabs Zgm130s037hgn	All versions
Silabs Zgm230sa27hgn	All versions
Silabs Zgm230sb27hgn	All versions

Related CWEs

CWE-281

Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (1)

https://github.com/CNK2100/2024-CVE/blob/main/README.md

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.