← Back to CVEs
CVE-2020-9060
MEDIUM6.5
Description
Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource exhaustion via malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages.
CVE Details
CVSS v3.1 Score6.5
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack VectorADJACENT_NETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published1/10/2022
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
aeotec:zw090-afibaro:fgwpb-111silabs:500_series_firmwarezooz:zen20zooz:zen25zooz:zst10
Weaknesses (CWE)
CWE-346CWE-400CWE-400
References
https://doi.org/10.1109/ACCESS.2021.3138768(cret@cert.org)
https://github.com/CNK2100/VFuzz-public(cret@cert.org)
https://ieeexplore.ieee.org/document/9663293(cret@cert.org)
https://kb.cert.org/vuls/id/142629(cret@cert.org)
https://www.kb.cert.org/vuls/id/142629(cret@cert.org)
https://doi.org/10.1109/ACCESS.2021.3138768(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/CNK2100/VFuzz-public(af854a3a-2127-422b-91ae-364da2661108)
https://ieeexplore.ieee.org/document/9663293(af854a3a-2127-422b-91ae-364da2661108)
https://kb.cert.org/vuls/id/142629(af854a3a-2127-422b-91ae-364da2661108)
https://www.kb.cert.org/vuls/id/142629(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.