High severity · published Feb 4, 2022
CVE-2013-20003
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to…
8.3
CVSS
0.6%
EPSS
No
On KEV
Description
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZF
Zgm130s037hgn Firmware · Silabs
s2 · source: NVD
ZF
Zgm2305a27hgn Firmware · Silabs
s2 · source: NVD
ZF
Zgm230sb27hgn Firmware · Silabs
s2 · source: NVD
ZF
Zm5101 Firmware · Silabs
s2 · source: NVD
ZF
Zm5202 Firmware · Silabs
s2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-20003
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-20003
Third Party Advisory
https://orangecyberdefense.com/global/blog/sensepost/blackhat-conference-z-wave-security/
Technical Description
https://sensepost.com/cms/resources/conferences/2013/bh_zwave/Security%20Evaluation%20of%20Z-Wave_WP.pdf
Exploit
https://www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/
More from Zgm130s037hgn Firmware
8.1
CVE-2018-25029
The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and…