CVE-2020-9057

{"id": "CVE-2020-9057", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-01-10T14:10:16.150", "references": [{"url": "https://doi.org/10.1109/ACCESS.2021.3138768", "tags": ["Broken Link"], "source": "cret@cert.org"}, {"url": "https://github.com/CNK2100/VFuzz-public", "tags": ["Third Party Advisory"], "source": "cret@cert.org"}, {"url": "https://ieeexplore.ieee.org/document/9663293", "tags": ["Broken Link"], "source": "cret@cert.org"}, {"url": "https://kb.cert.org/vuls/id/142629", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}, {"url": "https://www.kb.cert.org/vuls/id/142629", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}, {"url": "https://doi.org/10.1109/ACCESS.2021.3138768", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/CNK2100/VFuzz-public", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://ieeexplore.ieee.org/document/9663293", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://kb.cert.org/vuls/id/142629", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.kb.cert.org/vuls/id/142629", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cret@cert.org", "description": [{"lang": "en", "value": "CWE-311"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-311"}]}], "descriptions": [{"lang": "en", "value": "Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware upgrades cannot directly address this vulnerability as it is an issue with the Z-Wave specification for these legacy chipsets. One way to protect against this vulnerability is to use 500 or 700 series chipsets that support Security 2 (S2) encryption. As examples, the Linear WADWAZ-1 version 3.43 and WAPIRZ-1 version 3.43 (with 300 series chipsets) are vulnerable."}, {"lang": "es", "value": "Los dispositivos Z-Wave basados en los conjuntos de chips de las series 100, 200 y 300 de Silicon Labs no admiten cifrado, permitiendo a un atacante dentro del alcance de la radio tomar el control o causar una denegaci\u00f3n de servicio en un dispositivo vulnerable. Un atacante tambi\u00e9n puede capturar y reproducir el tr\u00e1fico Z-Wave. Las actualizaciones de firmware no pueden abordar directamente esta vulnerabilidad, ya que es un problema con la especificaci\u00f3n Z-Wave para estos conjuntos de chips heredados. Una forma de protegerse contra esta vulnerabilidad es usar los conjuntos de chips de las series 500 o 700 que soportan el cifrado de Seguridad 2 (S2). Como ejemplos, el Linear WADWAZ-1 versi\u00f3n 3.43 y WAPIRZ-1 versi\u00f3n 3.43 (con chipsets de la serie 300) son vulnerables"}], "lastModified": "2024-11-21T05:39:55.610", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linear:wadwaz-1:3.43:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29A637D2-2EEB-46FA-925E-230467C662FB"}, {"criteria": "cpe:2.3:o:linear:wapirz-1:3.43:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62E39D10-8B14-4377-A7A6-CE75DFC6B349"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:silabs:100_series_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD65067D-33BE-47A3-8586-9B7165D44120"}, {"criteria": "cpe:2.3:o:silabs:200_series_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E0D4883-9F5A-447F-85ED-E47D0C5A4940"}, {"criteria": "cpe:2.3:o:silabs:300_series_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "357345BC-2448-46B7-8DED-13B291708DF0"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}