CVE-2020-10137 | BDVDB-2026-167364 Detail

Silicon LabsUZB-7

Description#

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-345 Insufficient Verification of Data Authenticity

References#

https://kb.cert.org/vuls/id/142629
https://ieeexplore.ieee.org/document/9663293
https://github.com/CNK2100/VFuzz-public
https://doi.org/10.1109/ACCESS.2021.3138768
https://www.kb.cert.org/vuls/id/142629

Exploit#

No public exploit known

History#

Version 12022-01-09Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.