{
"id": "GHSA-4q48-pmwx-4p3r",
"aliases": [
"CVE-2020-9058"
],
"details": "Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.",
"affected": [],
"modified": "2022-01-19T00:01:59Z",
"severity": [],
"published": "2022-01-11T00:01:42Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9058",
"type": "ADVISORY"
},
{
"url": "https://doi.org/10.1109/ACCESS.2021.3138768",
"type": "WEB"
},
{
"url": "https://github.com/CNK2100/VFuzz-public",
"type": "WEB"
},
{
"url": "https://ieeexplore.ieee.org/document/9663293",
"type": "WEB"
},
{
"url": "https://kb.cert.org/vuls/id/142629",
"type": "WEB"
},
{
"url": "https://www.kb.cert.org/vuls/id/142629",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-311"
],
"severity": "HIGH",
"github_reviewed": false,
"nvd_published_at": "2022-01-10T14:10:00Z",
"github_reviewed_at": null
}
}