CVE-2020-9059

Katalog CVE

CVSS 6.5 · Medium EPSS 0,85%

Kerentanan Uncontrolled Resource Consumption pada silabs 500 series firmware, schlage be468. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level.

Rincian

Terbit di NVD

10 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 56,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://www.kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://github.com/CNK2100/VFuzz-public advisory pihak ketiga
• https://doi.org/10.1109/ACCESS.2021.3138768 broken link
• https://ieeexplore.ieee.org/document/9663293 broken link