1320 matches found
CVE-2020-9059
CVE-2020-9059 affects Z-Wave devices built on Silicon Labs 500-series chipsets using S0 authentication. The root issue is uncontrolled resource consumption that can lead to battery exhaustion, with an example of Schlage BE468 (v3.42) failing open at low battery. Public sources describe multiple m...
CVE-2020-9059
Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level...
CVE-2020-9058
Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection...
CVE-2020-9058
CVE-2020-9058 affects Z‑Wave devices based on Silicon Labs 500 series chipsets using CRC‑16 encapsulation and lacking encryption or replay protection. Concrete examples in the initial data include Linear LB60Z‑1 (v3.5), Dome DM501 (v4.26), and Jasco ZW4201 (v4.05). The root cause is absence of en...
CVE-2020-9057
CVE-2020-9057 covers Z-Wave devices using Silicon Labs 100/200/300 series chipsets that do not support encryption. The vulnerability stems from the Z-Wave specification for these legacy chips, allowing an attacker in radio range to take control of or cause a DoS, and to capture/replay traffic. Fi...
CVE-2020-9057
Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware upgrades cannot direct...
PT-2022-9071
Name of the Vulnerable Software and Affected Versions Z-Wave devices based on Silicon Labs 500 series chipsets versions affected versions not specified Linear LB60Z-1 version 3.5 Dome DM501 version 4.26 Jasco ZW4201 version 4.05 Description The issue concerns Z-Wave devices that do not implement...
CVE-2020-9058: Missing Encryption of Sensitive Data
Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection...
PT-2022-9073 · Zooz +2 · Zooz Zst10 +4
Name of the Vulnerable Software and Affected Versions: ZooZ ZST10 version 6.04 ZooZ ZEN20 version 5.03 ZooZ ZEN25 version 5.03 Aeon Labs ZW090-A version 3.95 Fibaro FGWPB-111 version 4.3 Description: Z-Wave devices based on Silicon Labs 500 series chipsets using S2 are susceptible to denial of...
CVE-2020-9057: Missing Encryption of Sensitive Data
Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware upgrades cannot direct...
PT-2022-9070
Name of the Vulnerable Software and Affected Versions Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets Linear WADWAZ-1 version 3.43 Linear WAPIRZ-1 version 3.43 Description The issue affects Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets, which do not...
PT-2022-9074
Name of the Vulnerable Software and Affected Versions Z-Wave devices using Silicon Labs 500 and 700 series chipsets versions affected versions not specified SiLabs UZB-7 version 7.00 ZooZ ZST10 version 6.04 Aeon Labs ZW090-A version 3.95 Samsung STH-ETH-200 version 6.04 Description The issue...
Silicon Labs Z-Wave chipsets contain multiple vulnerabilities
Overview Various Silicon Labs Z-Wave chipsets do not support encryption, can be downgraded to not use weaker encryption, and are vulnerable to denial of service. Some of these vulnerabilities are inherent in Z-Wave protocol specifications. Description Z-Wave devices based on Silicon Labs chipsets...
Adobe Premiere Rush Buffer Overflow
The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing WAV files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2021-43024
Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
PT-2021-5696 · Adobe · Premiere Rush
Name of the Vulnerable Software and Affected Versions: Adobe Premiere Rush versions 1.5.16 and earlier Description: The issue is caused by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the...
CVE-2021-40754
Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a...
OESA-2021-1426 SDL security update
Simple DirectMedia LayerSDL is a cross-platform development library designed\ to provide low level access to audio, keyboard, mouse, joystick, and graphics\ hardware via OpenGL and Direct3D. It is used by video playback software, emulators,\ and popular games including Valve's award winning catal...
UBUNTU-CVE-2020-23904
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service DoS via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program...