VDB

CVE-2020-9058

CVE-2020-9058 PUBLISHED CVSS 8.100000381469727 HIGH

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

EPSS 0.30% · 22.3th percentile

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.30%
22.3th percentile

Affected Products

VendorProductVersions
jascozw42014.05
Silicon Labs500 seriesall
DomeDM5014.26
LinearLB60Z-13.5
linearlb60z-13.5
domedm5014.26
JascoZW42014.05
silabs500_series_firmware

Timeline

  • Jan 7, 2022 CVE Published
  • Jan 7, 2022 EPSS Score
  • Mar 2, 2022 EPSS Score
  • Apr 24, 2022 EPSS Score
  • Jun 17, 2022 EPSS Score
  • Aug 10, 2022 EPSS Score
  • Oct 3, 2022 EPSS Score
  • Nov 26, 2022 EPSS Score
  • Jan 18, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 13, 2023 EPSS Score
  • May 5, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›