Unrated severityNVD Advisory· Published Jan 7, 2022· Updated Sep 16, 2024

CVE-2020-9060

Description

Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource exhaustion via malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aeon Labs/ZW090-Allm-fuzzy2 versions
3.95+ 1 more
- (no CPE)range: 3.95
- (no CPE)range: 3.95
Silabs.com/500 series chipsetsllm-fuzzy
Zooz/Zst10llm-fuzzy2 versions
6.04+ 1 more
- (no CPE)range: 6.04
- (no CPE)range: 6.04
Zooz/Zen25v5
Range: 5.03

Patches

Vulnerability mechanics

References

kb.cert.org/vuls/id/142629mitrethird-party-advisoryx_refsource_CERT-VN
www.kb.cert.org/vuls/id/142629mitrethird-party-advisoryx_refsource_CERT-VN
doi.org/10.1109/ACCESS.2021.3138768mitrex_refsource_MISC
ieeexplore.ieee.org/document/9663293mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000