CVE-2020-10137
Published
CVSS v3
6.5
MEDIUM
CVSS v2
3.3
LOW
Affected
1
PROJECT
Description
Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.
GitHub