CVE-2020-9058

Katalog CVE

CVSS 8.1 · High EPSS 0,30%

Kerentanan Missing Encryption of Sensitive Data pada silabs 500 series firmware, dome dm501 +2 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

Rincian

Terbit di NVD

10 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-311: Missing Encryption of Sensitive Data

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://www.kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://github.com/CNK2100/VFuzz-public advisory pihak ketiga
• https://doi.org/10.1109/ACCESS.2021.3138768 broken link
• https://ieeexplore.ieee.org/document/9663293 broken link