{"id":"CVE-2022-24611","title":"Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but abs…","summary":"Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but abs…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"silabs","product":"zm5202_firmware","affected":["zm5202_firmware","zm5101_firmware","sd3503_firmware","sd3502_firmware","zm5304_firmware"],"published":"2022-05-17","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-24611","references":[{"url":"https://github.com/ITSecLab-HSEL/CVE-2022-24611","label":"cve@mitre.org"},{"url":"http://z-wave.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/ITSecLab-HSEL/CVE-2022-24611","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.00687,"epssPercentile":0.51272,"ingestedAt":"2026-07-06T17:03:24.387Z","exploits":{"github":1,"githubRepos":["https://github.com/ITSecLab-HSEL/CVE-2022-24611"],"checkedAt":"2026-09-23T07:13:22.888Z"},"exploitAvailable":true,"slug":"CVE-2022-24611","body":"## Overview\n\nDenial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.\n\n## Affected\n\n- `zm5202_firmware`\n- `zm5101_firmware`\n- `sd3503_firmware`\n- `sd3502_firmware`\n- `zm5304_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4592,"id":"CVE-2022-24611","ts":1788887193597,"field":"exploit_available","old":"false","new":"true"},{"seq":3475,"id":"CVE-2022-24611","ts":1788886310007,"field":"exploit_available","old":"true","new":"false"},{"seq":2329,"id":"CVE-2022-24611","ts":1788882979533,"field":"exploit_available","old":"false","new":"true"},{"seq":1358,"id":"CVE-2022-24611","ts":1788882392111,"field":"exploit_available","old":"true","new":"false"},{"seq":472,"id":"CVE-2022-24611","ts":1788881827737,"field":"exploit_available","old":"false","new":"true"}]}