CVE-2018-25029: High severity Silicon Labs ZGM130S037HGN Firmware vulnerability
The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (CVE-2013-20003) to intercept and spoof traffic.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-25029?
CVE-2018-25029 is a vulnerability in the Z-Wave specification that allows an attacker within radio range to downgrade S2 security to S0 or other less secure protocols.
How does CVE-2018-25029 work?
CVE-2018-25029 allows an attacker within radio range to exploit a different vulnerability (CVE-2013-20003) by downgrading the security level during pairing, which enables them to intercept and spoof traffic.
What is the severity of CVE-2018-25029?
CVE-2018-25029 has a severity rating of 8.1 (High).
Which software and firmware versions are affected by CVE-2018-25029?
Silabs Zgm130s037hgn Firmware (version s2), Silabs Zm5202 Firmware (version s2), Silabs Zm5101 Firmware (version s2), Silabs Zgm2305a27hgn Firmware (version s2), and Silabs Zgm230sb27hgn Firmware (version s2) are affected by CVE-2018-25029.
How can I fix CVE-2018-25029?
To fix CVE-2018-25029, it is recommended to update the affected software and firmware to a version that addresses this vulnerability.