CVE-2022-24611

Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

6.1 MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.69% chance of exploitation in the next 30 days, 50th percentile

Published

2022-05-17

Updated

2026-07-09

Proof-of-concept exploits (1)

• ITSecLab-HSEL/CVE-2022-246112★ · 2022-05-17

References

• CVE Record
• NVD entry

Related

• CVE-2022-2461
• CVE-2022-24613
• CVE-2022-2460
• CVE-2022-24614
• CVE-2022-24599
• CVE-2022-2462