CVE-2020-9061

Katalog CVE

CVSS 6.5 · Medium EPSS 0,73%

Kerentanan Improper Authorization pada aeotec zw090-a, samsung sth-eth-200 +4 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages.

Rincian

Terbit di NVD

10 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-285: Improper Authorization

EPSS (30 hari)

0,73% peluang dieksploitasi; lebih tinggi dari 53,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://www.kb.cert.org/vuls/id/142629 advisory pihak ketiga · pemerintah AS
• https://github.com/CNK2100/VFuzz-public advisory pihak ketiga
• https://doi.org/10.1109/ACCESS.2021.3138768 broken link
• https://ieeexplore.ieee.org/document/9663293 broken link