CVE-2020-10137

Katalog CVE

CVSS 6.5 · Medium EPSS 0,70%

Kerentanan Insufficient Verification of Data Authenticity pada silabs uzb-7, silabs 700 series firmware. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.

Rincian

Terbit di NVD

10 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,70% peluang dieksploitasi; lebih tinggi dari 52,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://www.kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://github.com/CNK2100/VFuzz-public advisory pihak ketiga
• https://doi.org/10.1109/ACCESS.2021.3138768 broken link
• https://ieeexplore.ieee.org/document/9663293 broken link