CVE-2020-9058

2022-01-0704:30:25

CWE-311

certcc

www.cve.org

z-wave

silicon labs

crc-16

linear lb60z-1

dome dm501

jasco zw4201

encryption

replay protection

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

CNA Affected

[
  {
    "product": "LB60Z-1",
    "vendor": "Linear",
    "versions": [
      {
        "status": "affected",
        "version": "3.5"
      }
    ]
  },
  {
    "product": "DM501",
    "vendor": "Dome",
    "versions": [
      {
        "status": "affected",
        "version": "4.26"
      }
    ]
  },
  {
    "product": "ZW4201",
    "vendor": "Jasco",
    "versions": [
      {
        "status": "affected",
        "version": "4.05"
      }
    ]
  },
  {
    "product": "500 series",
    "vendor": "Silicon Labs",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  }
]