Z-Wave devices based on Silicon Labs 700 series chipsets...
Moderate severity
Unreviewed
Published
Jan 11, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 10, 2022
Published to the GitHub Advisory Database
Jan 11, 2022
Last updated
Feb 3, 2023
Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.
References