Record status Published
Identifier year (not publication year) 2020
Source publication Jan 7, 2022
Source updated Sep 16, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource exhaustion via malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ZEN25
Vendor ZooZ
Product ZEN25
Platforms Unknown
Default status Unknown
ZEN25 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 5.03 affectedUnavailable Unavailable Unavailable None listed
ZEN20
Vendor ZooZ
Product ZEN20
Platforms Unknown
Default status Unknown
ZEN20 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 5.03 affectedUnavailable Unavailable Unavailable None listed
ZST10
Vendor ZooZ
Product ZST10
Platforms Unknown
Default status Unknown
ZST10 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 6.04 affectedUnavailable Unavailable Unavailable None listed
FGWPB-111
Vendor Fibaro
Product FGWPB-111
Platforms Unknown
Default status Unknown
FGWPB-111 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.3 affectedUnavailable Unavailable Unavailable None listed
500 series
Vendor Silicon Labs
Product 500 series
Platforms Unknown
Default status Unknown
500 series · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) all affectedUnavailable Unavailable Unavailable None listed
ZW090-A
Vendor Aeon Labs
Product ZW090-A
Platforms Unknown
Default status Unknown
ZW090-A · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 3.95 affectedUnavailable Unavailable Unavailable None listed