CVE-2020-9057 - Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device

Back Back to CVE browser

HIGH

Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device

Published Jan 7, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.41%

Description

Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware upgrades cannot directly address this vulnerability as it is an issue with the Z-Wave specification for these legacy chipsets. One way to protect against this vulnerability is to use 500 or 700 series chipsets that support Security 2 (S2) encryption. As examples, the Linear WADWAZ-1 version 3.43 and WAPIRZ-1 version 3.43 (with 300 series chipsets) are vulnerable.

Affected products

Vendor Linear Product Wadwaz-1 Default
n/a
- Version
  3.43
  Status
  affected
  Constraints
  -
Vendor Linear Product Wapirz-1 Default
n/a
- Version
  3.43
  Status
  affected
  Constraints
  -
Vendor Silicon Labs Product 100 Series Default
n/a
- Version
  all
  Status
  affected
  Constraints
  -
Vendor Silicon Labs Product 200 Series Default
n/a
- Version
  all
  Status
  affected
  Constraints
  -
Vendor Silicon Labs Product 300 Series Default
n/a
- Version
  all
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linear

Wadwaz-1

n/a

Version	Status	Constraints
3.43	affected	-

Linear

Wapirz-1

n/a

Version	Status	Constraints
3.43	affected	-

Silicon Labs

100 Series

n/a

Version	Status	Constraints
all	affected	-

Silicon Labs

200 Series

n/a

Version	Status	Constraints
all	affected	-

Silicon Labs

300 Series

n/a

Version	Status	Constraints
all	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-311

Missing Encryption of Sensitive Data

References (5)

https://doi.org/10.1109/ACCESS.2021.3138768
x_refsource_MISCBroken Link
https://github.com/CNK2100/VFuzz-public
x_refsource_MISCThird Party Advisory
https://ieeexplore.ieee.org/document/9663293
x_refsource_MISCBroken Link
https://kb.cert.org/vuls/id/142629
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://www.kb.cert.org/vuls/id/142629
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://doi.org/10.1109/ACCESS.2021.3138768		x_refsource_MISCBroken Link
https://github.com/CNK2100/VFuzz-public		x_refsource_MISCThird Party Advisory
https://ieeexplore.ieee.org/document/9663293		x_refsource_MISCBroken Link
https://kb.cert.org/vuls/id/142629		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://www.kb.cert.org/vuls/id/142629		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource