CVE-2020-9061

Medium

Description

Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages.

SeverityMedium
CVSS6.5
Exploit probability—
ProductAeotec Zw090-a
PublishedJan 10, 2022
First seenJan 10, 2022
Weakness typeCWE-285CWE-285

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
aeotec zw090-a3.95—
samsung sth-eth-2006.04—
silabs uzb-77.00—
zooz zst106.04—
silabs 500_series_firmwareNo range specified—
silabs 700_series_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.