CVE Feed

    Dashboard / CVE / CVE-2013-20003

    CVE-2013-20003

    Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.

    Published:Feb 4, 2022
    Last Modified:Nov 21, 2024
    EPS:Feb 4, 2022
    EPSS Score:0.00141
    CVSS Score:8.3

    Affected Products

    Vendor
    Silabs
    Product
    Zgm130s037hgn
    Vendor
    Silabs
    Product
    Zgm130s037hgn Firmware
    Vendor
    Silabs
    Product
    Zgm2305a27hgn
    Vendor
    Silabs
    Product
    Zgm2305a27hgn Firmware
    Vendor
    Silabs
    Product
    Zgm230sb27hgn
    Vendor
    Silabs
    Product
    Zgm230sb27hgn Firmware
    Vendor
    Silabs
    Product
    Zm5101
    Vendor
    Silabs
    Product
    Zm5101 Firmware
    Vendor
    Silabs
    Product
    Zm5202
    Vendor
    Silabs
    Product
    Zm5202 Firmware

    Exploits

    https://www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/https://www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/

    Related CVEs

    CVE-2024-50921 (CVSS 6.5) — Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Den…
    CVE-2024-50920 (CVSS 8.8) — Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fa…
    CVE-2024-50928 (CVSS 6.5) — Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the …
    CVE-2024-50929 (CVSS 6.2) — Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily…
    CVE-2024-50924 (CVSS 6.5) — Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disru…
    CVE-2018-25029 (CVSS 8.1) — The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, all…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High