Vulnerability in Z-Wave Devices from Sierra Designs and Silicon Labs

CVE-2013-20003

What is CVE-2013-20003?

Z-Wave devices manufactured by Sierra Designs and Silicon Labs prior to 2013 may leverage a common, known network key (all zeros), enabling attackers within radio range to simulate Z-Wave traffic. This flaw poses a significant risk as it could facilitate unauthorized access and manipulation of connected devices. Users should assess their setup for vulnerabilities related to such Z-Wave implementations.

References