HIGH✓ PATCH🇬🇧 English

CVE-2018-25029

CVSS 8.1v3.1pub. 2022-02-04upd. 2024-11-21

The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (CVE-2013-20003) to intercept and spoof traffic.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Silabs Zgm130s037hgn

    HW
    Silabs
    wszystkie wersje

  • Silabs Zgm130s037hgn Firmware

    OS
    Silabs
    s2

  • Silabs Zgm2305a27hgn

    HW
    Silabs
    wszystkie wersje

  • Silabs Zgm2305a27hgn Firmware

    OS
    Silabs
    s2

  • Silabs Zgm230sb27hgn

    HW
    Silabs
    wszystkie wersje

  • Silabs Zgm230sb27hgn Firmware

    OS
    Silabs
    s2

  • Silabs Zm5101

    HW
    Silabs
    wszystkie wersje

  • Silabs Zm5101 Firmware

    OS
    Silabs
    s2

  • Silabs Zm5202

    HW
    Silabs
    wszystkie wersje

  • Silabs Zm5202 Firmware

    OS
    Silabs
    s2
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2024-50920HIGH8.8ten sam produkt

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fa...

CVE-2024-50930HIGH8.8ten sam produkt

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.

CVE-2013-20003HIGH8.3ten sam produkt

Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared n...

CVE-2024-50928MEDIUM6.5ten sam produkt

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the ...

CVE-2024-50929MEDIUM6.2ten sam produkt

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily...

CVE-2018-25029 — HIGH 8.1 | CVEbaza.pl