CVE-2018-25029

The CVE-2018-25029 entry concerns Z-Wave S2 security downgrading to S0 during pairing, enabling an attacker in radio range to trigger a separate vulnerability (CVE-2013-20003) to intercept and spoof traffic. Connected records (e.g., CVE-2013-20003, PRION/CVE-2018-25029) indicate Z-Wave devices fr...

CVE-2013-20003

The CVE-2013-20003 entry describes Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs using S0 security that rely on a known, shared all-zero network key. The root issue is that an attacker within radio range can spoof Z-Wave traffic due to this shared key. Related connected materia...