CVE-2020-9058
First published: Mon Dec 27 2021(Updated: )
Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Silabs 500 Series Firmware | ||
| Dome DM501 | =4.26 | |
| Jasco ZW4201 | =4.05 | |
| Linear LB60Z-1 | =3.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-9058?
CVE-2020-9058 is a vulnerability that affects Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including several specific models.
What is the severity of CVE-2020-9058?
CVE-2020-9058 has a severity score of 8.1, which is considered high.
Which Z-Wave devices are affected by CVE-2020-9058?
Z-Wave devices such as the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05 are affected by CVE-2020-9058.
Does CVE-2020-9058 exploit encryption or replay protection?
No, Z-Wave devices affected by CVE-2020-9058 do not implement encryption or replay protection.
How can I mitigate the CVE-2020-9058 vulnerability?
To mitigate the CVE-2020-9058 vulnerability, it is recommended to apply any firmware updates or patches provided by the manufacturer of the affected Z-Wave devices.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/silabs
- canonical/silabs 500 series firmware
- vendor/dome
- canonical/dome dm501
- version/dome dm501/4.26
- vendor/jasco
- canonical/jasco zw4201
- version/jasco zw4201/4.05
- vendor/linear
- canonical/linear lb60z-1
- version/linear lb60z-1/3.5