CVE-2013-20003: Weak RNG
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2013-20003?
CVE-2013-20003 is a vulnerability in Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) that allows an attacker within radio range to spoof Z-Wave traffic.
How does CVE-2013-20003 work?
CVE-2013-20003 occurs because Z-Wave devices from Sierra Designs and Silicon Labs use a known, shared network key of all zeros, making it possible for an attacker to impersonate Z-Wave traffic.
What is the severity of CVE-2013-20003?
CVE-2013-20003 has a severity value of 8.3 out of 10, indicating a high severity.
Which devices are affected by CVE-2013-20003?
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) are affected by CVE-2013-20003.
How can CVE-2013-20003 be fixed?
To fix CVE-2013-20003, it is recommended to update the firmware of the affected Z-Wave devices to a version that addresses the vulnerability.