CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Silabs 5Zgm130s037hgn Firmware Zgm2305a27hgn FirmwareZgm230sb27hgn Firmware+2 moreNov 21, 2024 Feb 4, 2022 N/A· v4 8.1 HIGH· v3 4.8 MEDIUM· v2 The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (C...Show more |
1Silabs 5Zgm130s037hgn Firmware Zgm2305a27hgn FirmwareZgm230sb27hgn Firmware+2 moreNov 21, 2024 Feb 4, 2022 N/A· v4 8.3 HIGH· v3 7.9 HIGH· v2 Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic. |