cve/2020/CVE-2020-10137.md
2024-06-22 09:37:59 +00:00

852 B

CVE-2020-10137

Description

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.

POC

Reference

Github