← Back

CVE-2020-9058

nvd nist
Published: Jan 10, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.2
Source: NVD

Description

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

Affected (4)

Products: Silabs: 500 Series Firmware · Dome: Dm501 · Jasco: Zw4201 · +1 more
Show all products
Silabs: 500 Series Firmware · Dome: Dm501 · Jasco: Zw4201 · Linear: Lb60z 1
Silabs
1 product
500 Series Firmware
Dome
1 product
Dm501
Jasco
1 product
Zw4201
Linear
1 product
Lb60z 1
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
500 Series Firmware
All versions
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Dm501
Version 4.26
Zw4201
Version 4.05
Lb60z 1
Version 3.5

Related CWEs

CWE-311
Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.

References (10)

Source: cret@cert.org
Broken Link
Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Broken Link
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.