Denial of Service Vulnerability in Sigma Design Z-Wave Devices
CVE-2018-19983

6.5MEDIUM

Key Information:

Vendor

Silabs

Status
Z-wave S0 Firmware
Vendor
CVE Published:
9 December 2018

What is CVE-2018-19983?

A vulnerability in Sigma Design's Z-Wave S0 through S2 devices allows an attacker to launch a Denial of Service (DoS) attack. By continuously sending segmented 'Nonce Get' frames, the attacker disrupts the normal operation of the device's security mechanisms. When a Z-Wave device receives these frames, it generates a new nonce and becomes temporarily unresponsive, causing it to discard previous values. This manipulation prevents the device from successfully decrypting normal frames, thereby impacting its functionality and security. Users of Sigma Design Z-Wave devices should take precautions to mitigate potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/min1233/CVE/blob/master/2
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.