Z-Wave SDK vulnerabilities

2 known vulnerabilities in Z-Wave SDK from Silicon Labs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Z-Wave SDK: Buffer Copy without Checking Size of Input

  CVE-2024-22472May 7, 2024Silicon Labs

  A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Remote Code execution This issue affects all versions of Silicon Labs 500 Series SDK prior to v6.85.2 running on Silicon Labs 500 series Z-wave

• 8.8 High severity

  Z-Wave SDK: Out-of-bounds Read

  CVE-2023-51395Mar 7, 2024Silicon Labs

  The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.