CVE-2020-10137

Name of the Vulnerable Software and Affected Versions Z-Wave devices based on Silicon Labs 700 series chipsets (affected versions not specified)

Description The issue affects Z-Wave devices that use S2 authentication and are based on Silicon Labs 700 series chipsets. These devices do not properly authenticate or encrypt FIND NODE IN RANGE frames. As a result, a remote, unauthenticated attacker can inject a FIND NODE IN RANGE frame with an invalid random payload. This action can deny service by blocking the processing of upcoming events.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.