CVE-2020-9058

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.
References
Link Resource
https://github.com/CNK2100/VFuzz-public Third Party Advisory
https://kb.cert.org/vuls/id/142629 Third Party Advisory US Government Resource
https://ieeexplore.ieee.org/document/9663293 Broken Link
https://doi.org/10.1109/ACCESS.2021.3138768 Broken Link
https://www.kb.cert.org/vuls/id/142629 Third Party Advisory US Government Resource
Configurations

Configuration 1

cpe:2.3:o:silabs:500_series_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:jasco:zw4201:4.05:*:*:*:*:*:*:*
cpe:2.3:o:dome:dm501:4.26:*:*:*:*:*:*:*
cpe:2.3:o:linear:lb60z-1:3.5:*:*:*:*:*:*:*

Information

Published : 2022-01-10 02:10

Updated : 2022-01-18 05:09


NVD link : CVE-2020-9058

Mitre link : CVE-2020-9058

Products Affected
No products.
CWE
CWE-311

Missing Encryption of Sensitive Data