Vulnerability Details CVE-2022-24611
Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.8%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.1
References
Products affected by CVE-2022-24611
-
cpe:2.3:h:silabs:sd3502:-
-
cpe:2.3:h:silabs:sd3503:-
-
cpe:2.3:h:silabs:zm5101:-
-
cpe:2.3:h:silabs:zm5202:-
-
cpe:2.3:h:silabs:zm5304:-
-
cpe:2.3:o:silabs:sd3502_firmware:-
-
cpe:2.3:o:silabs:sd3503_firmware:-
-
cpe:2.3:o:silabs:zm5101_firmware:-
-
cpe:2.3:o:silabs:zm5202_firmware:-
-
cpe:2.3:o:silabs:zm5304_firmware:-