CVE-2020-9058

CVE-2020-9058 affects Z‑Wave devices based on Silicon Labs 500 series chipsets using CRC‑16 encapsulation and lacking encryption or replay protection. Concrete examples in the initial data include Linear LB60Z‑1 (v3.5), Dome DM501 (v4.26), and Jasco ZW4201 (v4.05). The root cause is absence of en...

CVE-2020-9061

CVE-2020-9061 affects Silicon Labs Z-Wave chipsets in 500 and 700 series (e.g., UZB-7 v7.00, ZooZ ZST10 v6.04, Aeon ZW090-A v3.95, Samsung STH-ETH-200 v6.04). The issue is a denial-of-service caused by malformed routing messages, enabling an attacker within Z-Wave radio range to disrupt devices. ...

CVE-2020-9059

CVE-2020-9059 affects Z-Wave devices built on Silicon Labs 500-series chipsets using S0 authentication. The root issue is uncontrolled resource consumption that can lead to battery exhaustion, with an example of Schlage BE468 (v3.42) failing open at low battery. Public sources describe multiple m...

CVE-2020-9060

The CVE-2020-9060 entry concerns Silicon Labs 500-series Z-Wave chipsets using S2, with a denial-of-service/resource-exhaustion risk triggered by malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages. Concrete affected devices/versions from connected docs inclu...