CVE-2020-9058 - Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection

Back Back to CVE browser

HIGH

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection

Published Jan 7, 2022

8.1

HIGH

CVSS 3.1

EPSS 0.30%

Description

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

Affected products

Vendor Dome Product n/a Default
unknown
Affected
- 4.26
Vendor Jasco Product n/a Default
unknown
Affected
- 4.05
Vendor Linear Product LB60Z-1 Default
unknown
Affected
- 3.5
Vendor Silicon Labs Product 500 Series Default
unknown
Affected
- all

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Dome	n/a	unknown	Affected 4.26
Jasco	n/a	unknown	Affected 4.05
Linear	LB60Z-1	unknown	Affected 3.5
Silicon Labs	500 Series	unknown	Affected all

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-311

Missing Encryption of Sensitive Data

References (6)

https://doi.org/10.1109/ACCESS.2021.3138768
x_refsource_MISCBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29887
Advisory
https://github.com/CNK2100/VFuzz-public
x_refsource_MISCThird Party Advisory
https://ieeexplore.ieee.org/document/9663293
x_refsource_MISCBroken Link
https://kb.cert.org/vuls/id/142629
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://www.kb.cert.org/vuls/id/142629
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://doi.org/10.1109/ACCESS.2021.3138768		x_refsource_MISCBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29887		Advisory
https://github.com/CNK2100/VFuzz-public		x_refsource_MISCThird Party Advisory
https://ieeexplore.ieee.org/document/9663293		x_refsource_MISCBroken Link
https://kb.cert.org/vuls/id/142629		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://www.kb.cert.org/vuls/id/142629		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Jan 7, 2022

Updated Sep 16, 2024

Reserved Feb 18, 2020

Link CVE-2020-9058

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9058

Red Hat

No data

ENISA EUVD

Assigner certcc

Published Jan 7, 2022

Updated Sep 16, 2024

Link EUVD-2020-29887

GitHub

No data