CVE-2020-9060 Details
Description
Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource exhaustion via malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://doi.org/10.1109/ACCESS.2021.3138768 | CVE | Broken Link |
| https://github.com/CNK2100/VFuzz-public | CVE | Third Party Advisory |
| https://ieeexplore.ieee.org/document/9663293 | CVE | Broken Link |
| https://kb.cert.org/vuls/id/142629 | CVE | Third Party AdvisoryUS Government Resource |
| https://www.kb.cert.org/vuls/id/142629 | CVE | Third Party AdvisoryUS Government Resource |
| https://doi.org/10.1109/ACCESS.2021.3138768 | [email protected] | Broken Link |
| https://github.com/CNK2100/VFuzz-public | [email protected] | Third Party Advisory |
| https://ieeexplore.ieee.org/document/9663293 | [email protected] | Broken Link |
| https://kb.cert.org/vuls/id/142629 | [email protected] | Third Party AdvisoryUS Government Resource |
| https://www.kb.cert.org/vuls/id/142629 | [email protected] | Third Party AdvisoryUS Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
| CWE-346 | Origin Validation Error | [email protected] |
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| silabs 500 series firmware | All versions |
CPE
Remediation
| |
| aeotec zw090-a | 3.95 |
CPE
Remediation
| |
| fibaro fgwpb-111 | 4.3 |
CPE
Remediation
| |
| zooz zen20 | 5.03 |
CPE
Remediation
| |
| zooz zen25 | 5.03 |
CPE
Remediation
| |
| zooz zst10 | 6.04 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Sep 20, 2022 | Reanalysis | [email protected] |
| Jan 18, 2022 | Initial Analysis | [email protected] |