CVE-2024-22472: Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution
This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2
running on Silicon Labs 500 series Z-wave devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22472?
CVE-2024-22472 is classified as a critical vulnerability due to its potential for Denial of Service and remote code execution.
How do I fix CVE-2024-22472?
To fix CVE-2024-22472, upgrade the Silicon Labs 500 Series SDK to version 6.85.2 or higher.
What devices are affected by CVE-2024-22472?
CVE-2024-22472 affects all versions of the Silicon Labs 500 Series SDK running on Silicon Labs 500 Series Z-Wave devices.
What could happen if CVE-2024-22472 is exploited?
Exploiting CVE-2024-22472 could lead to a Denial of Service situation and potentially allow attackers to execute remote code.
Is there a known workaround for CVE-2024-22472?
Currently, the primary mitigation for CVE-2024-22472 is to update to the patched version of the SDK, as no workarounds are documented.