← Back to CVEs

CVE-2020-10137

MEDIUM

6.5

Description

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.

CVE Details

CVSS v3.1 Score6.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published1/10/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

silabs:700_series_firmwaresilabs:uzb-7

Weaknesses (CWE)

CWE-345CWE-345

References

https://doi.org/10.1109/ACCESS.2021.3138768(cret@cert.org)

https://github.com/CNK2100/VFuzz-public(cret@cert.org)

https://ieeexplore.ieee.org/document/9663293(cret@cert.org)

https://kb.cert.org/vuls/id/142629(cret@cert.org)

https://www.kb.cert.org/vuls/id/142629(cret@cert.org)

https://doi.org/10.1109/ACCESS.2021.3138768(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/CNK2100/VFuzz-public(af854a3a-2127-422b-91ae-364da2661108)

https://ieeexplore.ieee.org/document/9663293(af854a3a-2127-422b-91ae-364da2661108)

https://kb.cert.org/vuls/id/142629(af854a3a-2127-422b-91ae-364da2661108)

https://www.kb.cert.org/vuls/id/142629(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.