CVE-2020-10137CWE-345

CVE-2020-10137: vulnerability in Silicon Labs UZB-7

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.
Affected products
Silicon Labs · UZB-7
Related CVEs — Silicon Labs UZB-7

In the same product, most dangerous first.