Skip to content
Sign in
Not rated

CVE-2020-10137 Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt…

Description

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.

Affected products and versions

Product Affected versions Fixed in
UZB-7 7.00 No fix stated

Other CVEs of UZB-7

The 2 CVEs of UZB-7 →
CVE-2020-9061 Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7… Not rated
Track this CVE