CVE-2022-24611: Silabs SD3502 Firmware

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.

Affected products

• Silabs SD3502 Firmware: affected versions not specified
• Silabs SD3503 Firmware: affected versions not specified
• Silabs ZM5101 Firmware: affected versions not specified
• Silabs ZM5202 Firmware: affected versions not specified
• Silabs ZM5304 Firmware: affected versions not specified

Published 2022-05-17. Last modified 2026-07-09.