CVE-2020-9061
First published: Fri Jan 07 2022(Updated: )
Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Aeotec Zw090-a | =3.95 | |
| Samsung STH-ETH-200 | =6.04 | |
| SiLabs UZB-7 | =7.00 | |
| ZooZ ZST10 | =6.04 | |
| Silabs 500 Series Firmware | ||
| Silabs 700 Series Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-9061?
CVE-2020-9061 is a vulnerability affecting Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including certain models such as Aeotec Zw090-a, Samsung STH-ETH-200, SiLabs UZB-7, and ZooZ ZST10.
How severe is CVE-2020-9061?
CVE-2020-9061 has a severity score of 6.5 out of 10.
How can Z-Wave devices be affected by CVE-2020-9061?
Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including certain models, can be affected by CVE-2020-9061 through denial of service attacks caused by malformed routing messages.
Which Z-Wave device models are susceptible to CVE-2020-9061?
Z-Wave devices such as Aeotec Zw090-a, Samsung STH-ETH-200, SiLabs UZB-7, and ZooZ ZST10 are susceptible to CVE-2020-9061.
Is there a fix available for CVE-2020-9061?
Currently, there is no known fix for CVE-2020-9061. It is recommended to follow any security advisories provided by the affected vendors and apply any patches or updates when they become available.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/aeotec
- canonical/aeotec zw090-a
- version/aeotec zw090-a/3.95
- vendor/samsung
- canonical/samsung sth-eth-200
- version/samsung sth-eth-200/6.04
- vendor/silabs
- canonical/silabs uzb-7
- version/silabs uzb-7/7.00
- vendor/zooz
- canonical/zooz zst10
- version/zooz zst10/6.04
- canonical/silabs 500 series firmware
- canonical/silabs 700 series firmware