Secuno
ENNL
Book demo

CVE-2024-50920

Silabs Z-wave Software Development Kit vulnerability

8.8 HIGHPublic exploitEPSS 0.46%
  1. Published10 Dec 2024

Description

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets.

CVSS 3.1 breakdown

Attack vectorAdjacent
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Silabs Z-wave Software Development Kit≤ 7.21.1

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-829648.8
Improper preservation of permissions in the Avast sandbox minifilter driver…
CVE-2026-448328.8
Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated…
CVE-2026-398329.1
When adding a key to a remote agent constraint extensions such as…
CVE-2026-248349.3
Kata Containers is an open source project focusing on a standard implementation of…
CVE-2025-551309.1
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and…
CVE-2025-342988.8
Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation…

Frequently asked

Is CVE-2024-50920 being actively exploited?

CVE-2024-50920 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.46%.

How severe is CVE-2024-50920?

CVE-2024-50920 has a CVSS 3.1 base score of 8.8, rated high. EPSS estimates a 0.46% probability of exploitation.

Which products are affected by CVE-2024-50920?

Affected products include Silabs Z-wave Software Development Kit.

How do I fix CVE-2024-50920?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-50920 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.