CVE-2020-9058

CVE-2020-9058

Vendor Linear

Product LB60Z-1

Weakness CWE-311 · Missing encryption

Published January 7, 2022

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

Key dates

02Disclosure timeline

January 7, 2022 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-9058 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/311.html

Related vulnerabilities

Identifiers

CVE CVE-2020-9058

CWE CWE-311

Affected versions

Vendor Linear

Product LB60Z-1

Affected 3.5

Vendor Dome

Product DM501

Affected 4.26

Vendor Jasco

Product ZW4201

Affected 4.05

Vendor Silicon Labs

Product 500 series

Affected all

01Description

02Disclosure timeline

03References

04Related CVE