CVE-2018-25029

🗓️ 04 Feb 2022 22:33:06Reported by certccType

The Z-Wave specification allows downgrading S2 security, enabling an attacker to intercept and spoof traffic

Reporter	Title	Published	Views	Family All 5
CNNVD	Z-Wave 安全漏洞	4 Feb 202200:00	–	cnnvd
Cvelist	CVE-2018-25029	4 Feb 202222:33	–	cvelist
EUVD	EUVD-2018-13804	7 Oct 202500:30	–	euvd
NVD	CVE-2018-25029	4 Feb 202223:15	–	nvd
Prion	Design/Logic Flaw	4 Feb 202223:15	–	prion

NVD

Node

silabs zgm130s037hgn_firmwareMatchs2

AND

silabs zgm130s037hgnMatch-

Node

silabs zm5202_firmwareMatchs2

AND

silabs zm5202Match-

Node

silabs zm5101_firmwareMatchs2

AND

silabs zm5101Match-

Node

silabs zgm2305a27hgn_firmwareMatchs2

AND

silabs zgm2305a27hgnMatch-

Node

silabs zgm230sb27hgn_firmwareMatchs2

AND

silabs zgm230sb27hgnMatch-

[
  {
    "product": "Z-Wave",
    "vendor": "Silicon Labs",
    "versions": [
      {
        "status": "affected",
        "version": "S2"
      }
    ]
  }
]

Source	Link
community	www.community.silabs.com/s/share/a5U1M000000knqNUAQ/updated-your-zwave-smart-locks-are-safe-and-secure
pentestpartners	www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/

21 Nov 2024 04:03Current

7.9High risk

Vulners AI Score7.9

CVSS 24.8

CVSS 3.18.1

EPSS0.00094

CWE-757

z-wave s2 security cve-2018-25029 vulnerability intercept exploit