Описание
Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages.
Ссылки
- Broken Link
- Third Party Advisory
- Broken Link
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
- Broken Link
- Third Party Advisory
- Broken Link
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:aeotec:zw090-a:3.95:*:*:*:*:*:*:*
cpe:2.3:o:samsung:sth-eth-200:6.04:*:*:*:*:*:*:*
cpe:2.3:o:silabs:uzb-7:7.00:*:*:*:*:*:*:*
cpe:2.3:o:zooz:zst10:6.04:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:silabs:500_series_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:silabs:700_series_firmware:-:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00142
Низкий
6.5 Medium
CVSS3
3.3 Low
CVSS2
Дефекты
CWE-285
NVD-CWE-noinfo
Связанные уязвимости
github
около 4 лет назад
Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages.
EPSS
Процентиль: 35%
0.00142
Низкий
6.5 Medium
CVSS3
3.3 Low
CVSS2
Дефекты
CWE-285
NVD-CWE-noinfo