CVE-2024-22472highCWE-120

CVE-2024-22472: high-severity vulnerability in Silicon Labs Z-Wave SDK

Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow

Published · Updated

Follow this CVE+ Monitor Z-Wave SDK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.8%
A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave devices.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Silicon Labs · Z-Wave SDK
Related CVEs — Silicon Labs Z-Wave SDK

In the same product, most dangerous first.

CVE-2023-51395HIGHZ-Wave S0 Decryption Vulnerability in End DevicesEPSS 0.3%CVE-2026-89409MEDIUMUnvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​EPSS 0.3%CVE-2026-89410MEDIUMOut-of-bounds read in Z-Wave NCP SPI HandlerEPSS 0.2%