CVE-2020-9059

State: Published
Severity: Not scored
Published: Jan 7, 2022
Updated: Sep 16, 2024
Reserved: Feb 18, 2020

Description

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level.

Scores

The record has no CVSS score.

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
BE468Schlage	3.42Affected
500 seriesSilicon Labs	allAffected

References

https://kb.cert.org/vuls/id/142629third-party-advisory
https://ieeexplore.ieee.org/document/9663293
https://github.com/CNK2100/VFuzz-public
https://doi.org/10.1109/ACCESS.2021.3138768
VU#142629third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.