CVE-2020-9058

State: Published
Severity: Not scored
Published: Jan 7, 2022
Updated: Sep 16, 2024
Reserved: Feb 18, 2020

Description

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

Scores

The record has no CVSS score.

Weaknesses

CWE-311 Missing Encryption of Sensitive Data

Affected Products

Product	Versions
LB60Z-1Linear	3.5Affected
DM501Dome	4.26Affected
ZW4201Jasco	4.05Affected
500 seriesSilicon Labs	allAffected

References

https://kb.cert.org/vuls/id/142629third-party-advisory
https://ieeexplore.ieee.org/document/9663293
https://github.com/CNK2100/VFuzz-public
https://doi.org/10.1109/ACCESS.2021.3138768
VU#142629third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.