The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (CVE-2013-20003) to intercept and spoof traffic.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: certcc
Published: 2022-02-04T22:33:06.210079Z
Updated: 2024-09-17T03:32:57.132Z
Reserved: 2022-01-26T00:00:00
Link: CVE-2018-25029
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-02-04T23:15:09.730
Modified: 2024-11-21T04:03:23.580
Link: CVE-2018-25029
Redhat
No data.