Silicon Labs Z-Wave chipsets contain multiple vulnerabilities

guest · Jan 7, 2022

Vulnerability Note VU#142629
January 7, 2022

Overview
Various Silicon Labs Z-Wave chipsets do not support encryption, can be downgraded to not use weaker encryption, and are vulnerable to denial of service. Some of these vulnerabilities are inherent in Z-Wave protocol specifications.
Description
Z-Wave devices based on Silicon Labs chipsets have multiple vulnerabilities. For further details, including specific devices tested, see Riding the IoT Wave With VFuzz: Discovering Security Flaws in Smart Homes.
Click to expand...

Impact
Depending on the chipset and device, an attacker within Z-Wave radio range can deny service, cause devices to crash, deplete batteries, intercept, observe, and replay traffic, and control vulnerable devices.
Solution
Mitigations for these vulnerabilities vary based on the chipset and device. In some cases it may be necessary to upgrade to newer hardware, for example, 500 and 700 series chipsets that support S2 authentication and encryption.
Click to expand...

Log in or Sign up

Silicon Labs Z-Wave chipsets contain multiple vulnerabilities

guest Guest

Log in or Sign up

Silicon Labs Z-Wave chipsets contain multiple vulnerabilities

guest Guest

Useful Searches