CVE-2022-24611
Medium
Published: 17 May 2022
Published
17 May 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.0025
48.5th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-24611 is a medium-severity an unspecified weakness vulnerability in Silabs Zm5202 Firmware. Its CVSS base score is 6.5 (Medium).
Operationally, ranked at the 48.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-29490
Vulnerability details
Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
silabs
zm5202 firmware
all versions
silabs
zm5101 firmware
all versions
silabs
sd3503 firmware
all versions
silabs
sd3502 firmware
all versions
silabs
zm5304 firmware
all versions
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.