CVE-2020-10137

2022-01-0904:15:13

CWE-345

certcc

www.cve.org

z-wave

silicon labs

700 series

authentication

encryption

find_node_in_range

remote attacker

denial of service

AI Score

7.2

Confidence

High

EPSS

0.004

Percentile

74.2%

JSON

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.

CNA Affected

[
  {
    "product": "UZB-7",
    "vendor": "Silicon Labs",
    "versions": [
      {
        "status": "affected",
        "version": "7.00"
      }
    ]
  }
]