CVEvulnerability
CVE-2020-9059
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 6.1 MEDIUM — AV:A/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-400, CWE-770
Description
Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level.
Affected configurations
• silabs 500 series firmware
• schlage be468 3.42
Related
References
- https://doi.org/10.1109/ACCESS.2021.3138768 Broken Link
- https://github.com/CNK2100/VFuzz-public Third Party Advisory
- https://ieeexplore.ieee.org/document/9663293 Broken Link
- https://kb.cert.org/vuls/id/142629 Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/142629 Third Party Advisory, US Government Resource
- https://doi.org/10.1109/ACCESS.2021.3138768 Broken Link
- https://github.com/CNK2100/VFuzz-public Third Party Advisory
- https://ieeexplore.ieee.org/document/9663293 Broken Link
- https://kb.cert.org/vuls/id/142629 Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/142629 Third Party Advisory, US Government Resource