CVE-2024-50929

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service (DoS).

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-281

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/CNK2100/2024-CVE/blob/main/README.mdExploit, Third Party Advisory

Timeline

Published: Dec 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-50939.8A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affe CVE-2024-509308.8An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.CVE-2024-509314.6Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions.CVE-2024-50949.8A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This issue affects some unkn CVE-2024-509429.8qiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component /mapper/NoticeMapper.xml.CVE-2024-509449.8Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality CVE-2024-509457.5An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submi CVE-2024-509477.5An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2024-509487.5mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management. An attacker can exhaust system memory and cra CVE-2024-50956.5A vulnerability classified as problematic has been found in Victor Zsviot Camera 8.26.31. This affects an unknown part of the component MQTT CVE-2024-509537.5An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service (DoS) via a crafted Modbus message.CVE-2024-509547.5The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TC