Vulnerability CVE-2020-9059


Published: 2022-01-10

Description:
Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level.

Type:

CWE-400

(Uncontrolled Resource Consumption ('Resource Exhaustion'))

CVSS2 => (AV:A/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.1/10
6.9/10
6.5/10
Exploit range
Attack complexity
Authentication
Adjacent network
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Silabs -> 500 series firmware 
Schlage -> Be468 

 References:
https://github.com/CNK2100/VFuzz-public
https://kb.cert.org/vuls/id/142629
https://ieeexplore.ieee.org/document/9663293
https://doi.org/10.1109/ACCESS.2021.3138768
https://www.kb.cert.org/vuls/id/142629

Copyright 2024, cxsecurity.com

 

Back to Top