CVE-2020-10137

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FINDNODEINRANGE frames, allowing a remote, unauthenticated attacker to inject a FINDNODEINRANGE frame with an invalid random payload, denying service by blocking the processing of upcoming...

Code injection

Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware upgrades cannot direct...

Design/Logic Flaw

Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages...

Code injection

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection...

Design/Logic Flaw

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FINDNODEINRANGE frames, allowing a remote, unauthenticated attacker to inject a FINDNODEINRANGE frame with an invalid random payload, denying service by blocking the processing of upcoming...

Design/Logic Flaw

Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource...

Design/Logic Flaw

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level...

Silicon Labs Z-Wave Chipsets 授权问题漏洞

Silicon Labs Z-Wave Chipsets is a chipset in the smart home ecosystem from Silicon Labs, Inc. The Silicon Labs Z-Wave Chipsets contain an authorization issue vulnerability that can be exploited by an attacker to perform a denial of service attack via a malformed routing message...

Silicon Labs Z-Wave Chipsets 资源管理错误漏洞

Silicon Labs Z-Wave Chipsets are a type of chipset in the smart home ecosystem from Silicon Labs, USA. A resource management error vulnerability exists in multiple z-wave devices that stems from the product's failure to properly handle SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, and N...

Z-Wave 安全漏洞

Z-Wave is a wireless communication protocol used primarily for home automation. It is a mesh network that uses low-power radio waves to communicate from device to device to wirelessly control appliances and other devices in the home, such as controlling lighting, security systems, thermostats,...

Silicon Labs Z-Wave Chipsets 资源管理错误漏洞

Silicon Labs Z-Wave Chipsets are a type of chipset in the smart home ecosystem from Silicon Labs, USA. The Silicon Labs Z-Wave Chipsets suffers from a resource management error vulnerability that stems from the fact that Z-Wave devices are based on the Silicon Labs 500 series chipsets, which use...

Silicon Labs Z-Wave Chipsets 安全漏洞

Silicon Labs Z-Wave Chipsets is a chipset in the smart home ecosystem from Silicon Labs, Inc. in the United States. A security vulnerability exists in Silicon Labs Z-Wave Chipsets that stems from the fact that the chipset uses a CRC-16 package and does not implement encryption or replay protectio...

CVE-2020-10137

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FINDNODEINRANGE frames, allowing a remote, unauthenticated attacker to inject a FINDNODEINRANGE frame with an invalid random payload, denying service by blocking the processing of upcoming...

CVE-2020-10137

CVE-2020-10137 affects Z-Wave devices built on Silicon Labs 700 series chips using S2. The root issue is inadequate authentication/encryption of FIND_NODE_IN_RANGE frames, enabling a remote, unauthenticated attacker to inject a frame with an invalid payload and cause a Denial of Service by blocki...

PT-2022-8315

Name of the Vulnerable Software and Affected Versions Z-Wave devices based on Silicon Labs 700 series chipsets affected versions not specified Description The issue affects Z-Wave devices that use S2 authentication and are based on Silicon Labs 700 series chipsets. These devices do not properly...

CVE-2020-10137: Insufficient Verification of Data Authenticity

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FINDNODEINRANGE frames, allowing a remote, unauthenticated attacker to inject a FINDNODEINRANGE frame with an invalid random payload, denying service by blocking the processing of upcoming...

CVE-2020-9061

Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages...

CVE-2020-9061

CVE-2020-9061 affects Silicon Labs Z-Wave chipsets in 500 and 700 series (e.g., UZB-7 v7.00, ZooZ ZST10 v6.04, Aeon ZW090-A v3.95, Samsung STH-ETH-200 v6.04). The issue is a denial-of-service caused by malformed routing messages, enabling an attacker within Z-Wave radio range to disrupt devices. ...

CVE-2020-9060

The CVE-2020-9060 entry concerns Silicon Labs 500-series Z-Wave chipsets using S2, with a denial-of-service/resource-exhaustion risk triggered by malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages. Concrete affected devices/versions from connected docs inclu...

CVE-2020-9060

Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource...