Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear…

Description

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

Scores

EPSS (exploitation in 30 days)

0.32% · top 75% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.

Weakness

• CWE-311 Missing Encryption of Sensitive Data (opens in a new tab)All about CWE-311 and its CVEs

Affected products

• Linear · LB60Z-1

  • affected 3.5

• Dome · DM501

  • affected 4.26

• Jasco · ZW4201

  • affected 4.05

• Silicon Labs · 500 series

  • affected all

References (5)

• https://kb.cert.org/vuls/id/142629 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• https://ieeexplore.ieee.org/document/9663293 (opens in a new tab)x_refsource_MISCx_transferred
• https://github.com/CNK2100/VFuzz-public (opens in a new tab)x_refsource_MISCx_transferred
• https://doi.org/10.1109/ACCESS.2021.3138768 (opens in a new tab)x_refsource_MISCx_transferred
• VU#142629 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2020-9058](https://trackcve.app/badge/CVE-2020-9058.svg)](https://trackcve.app/cve/CVE-2020-9058)

Record last updated 16 Sept 2024, 23:41 UTC.