CVE-2013-20003: Weak RNG
First published: Fri Feb 04 2022(Updated: )
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Silabs Zgm130s037hgn Firmware | =s2 | |
| Silabs Zgm130s037hgn | ||
| Silabs Zm5202 Firmware | =s2 | |
| Silabs Zm5202 | ||
| Silabs Zm5101 Firmware | =s2 | |
| Silabs Zm5101 | ||
| Silabs Zgm2305a27hgn Firmware | =s2 | |
| Silabs Zgm2305a27hgn | ||
| Silabs Zgm230sb27hgn Firmware | =s2 | |
| Silabs Zgm230sb27hgn |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2013-20003?
CVE-2013-20003 is a vulnerability in Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) that allows an attacker within radio range to spoof Z-Wave traffic.
How does CVE-2013-20003 work?
CVE-2013-20003 occurs because Z-Wave devices from Sierra Designs and Silicon Labs use a known, shared network key of all zeros, making it possible for an attacker to impersonate Z-Wave traffic.
What is the severity of CVE-2013-20003?
CVE-2013-20003 has a severity value of 8.3 out of 10, indicating a high severity.
Which devices are affected by CVE-2013-20003?
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) are affected by CVE-2013-20003.
How can CVE-2013-20003 be fixed?
To fix CVE-2013-20003, it is recommended to update the firmware of the affected Z-Wave devices to a version that addresses the vulnerability.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- vendor/silabs
- canonical/silabs zgm130s037hgn firmware
- version/silabs zgm130s037hgn firmware/s2
- canonical/silabs zgm130s037hgn
- canonical/silabs zm5202 firmware
- version/silabs zm5202 firmware/s2
- canonical/silabs zm5202
- canonical/silabs zm5101 firmware
- version/silabs zm5101 firmware/s2
- canonical/silabs zm5101
- canonical/silabs zgm2305a27hgn firmware
- version/silabs zgm2305a27hgn firmware/s2
- canonical/silabs zgm2305a27hgn
- canonical/silabs zgm230sb27hgn firmware
- version/silabs zgm230sb27hgn firmware/s2
- canonical/silabs zgm230sb27hgn