rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-9019 
The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T17:20:18.000Z
CVE-2020-9020 
Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:03:49.000Z
CVE-2020-9021 
Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:03:40.000Z
CVE-2020-9022 
An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:03:33.000Z
CVE-2020-9023 
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:03:19.000Z
CVE-2020-9024 
Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:03:10.000Z
CVE-2020-9025 
Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Viewer feature of the /cgi-bin/loaddata.py script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:03:02.000Z
CVE-2020-9026 
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:02:43.000Z
CVE-2020-9027 
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:02:34.000Z
CVE-2020-9028 
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion and Password Maintenance" screen (when creating a new user).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:02:26.000Z
CVE-2020-9029 
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:02:16.000Z
CVE-2020-9030 
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:02:08.000Z
CVE-2020-9031 
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:01:58.000Z
CVE-2020-9032 
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:01:51.000Z
CVE-2020-9033 
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:01:09.000Z
CVE-2020-9034 
Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T03:00:59.000Z
CVE-2020-9036 
Jeedom through 4.0.38 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-05T21:08:14.000Z
CVE-2020-9038 
Joplin through 1.0.184 allows Arbitrary File Read via XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T15:47:29.000Z
CVE-2020-9039 
Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The /settings REST endpoint exposed by the projector process is an endpoint that administrators can use for various tasks such as updating configuration and collecting performance profiles. The endpoint was unauthenticated and has been updated to only allow authenticated users to access these administrative APIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-22T01:30:33.000Z
CVE-2020-9040 
Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. An attacker can leverage this flaw by crafting a cryptographically valid certificate that will be accepted by Java SDK's Netty component due to missing hostname verification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T15:21:57.000Z
CVE-2020-9041 
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T15:21:37.000Z
CVE-2020-9042 
In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T15:21:22.000Z
CVE-2020-9043 
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T16:53:52.000Z
CVE-2020-9044 Metasys Improper Restriction of XML External Entity Reference
XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite) versions 10.1 and prior; Metasys Extended Application and Data Server (ADX) versions 10.1 and prior; Metasys Open Data Server (ODS) versions 10.1 and prior; Metasys Open Application Server (OAS) version 10.1; Metasys Network Automation Engine (NAE55 only) versions 9.0.1, 9.0.2, 9.0.3, 9.0.5, 9.0.6; Metasys Network Integration Engine (NIE55/NIE59) versions 9.0.1, 9.0.2, 9.0.3, 9.0.5, 9.0.6; Metasys NAE85 and NIE85 versions 10.1 and prior; Metasys LonWorks Control Server (LCS) versions 10.1 and prior; Metasys System Configuration Tool (SCT) versions 13.2 and prior; Metasys Smoke Control Network Automation Engine (NAE55, UL 864 UUKL/ORD-C100-13 UUKLC 10th Edition Listed) version 8.1.
Problem types: cwe_id: CWE-611
description: CWE-611 - Information Leak Through XML External Entity File Disclosure
Affected products: vendor: Johnson Controls
product: Metasys Application and Data Server (ADS, ADS-Lite)
vendor: Johnson Controls
product: Metasys Extended Application and Data Server (ADX)
vendor: Johnson Controls
product: Metasys Open Data Server (ODS)
vendor: Johnson Controls
product: Metasys Open Application Server (OAS)
vendor: Johnson Controls
product: Metasys Network Automation Engine (NAE55 only)
vendor: Johnson Controls
product: Metasys Network Integration Engine (NIE55/NIE59)
vendor: Johnson Controls
product: Metasys NAE85 and NIE85
vendor: Johnson Controls
product: Metasys LonWorks Control Server (LCS)
vendor: Johnson Controls
product: Metasys System Configuration Tool (SCT)
vendor: Johnson Controls
product: Metasys Smoke Control Network Automation Engine (NAE55, UL 864 UUKL/ORD-C100-13 UUKLC 10th Edition Listed)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Lukasz Rupala
Published: 2020-03-10T19:28:30.000Z
CVE-2020-9045 C•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software.
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation.
Problem types: cwe_id: CWE-312
description: CWE-312 - Cleartext Storage of Sensitive Information
Affected products: vendor: Johnson Controls
product: Software House C•CURE 9000 v2.70
vendor: Johnson Controls
product: American Dynamics victor Video Management System v5.2
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.9
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2020-05-21T14:45:44.000Z
CVE-2020-9046 Kantech EntraPass Security Management Software - System Permissions Vulnerability
A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.
Problem types: cwe_id: CWE-284
description: CWE-284 : Access Control (Authorization) Issues
Affected products: vendor: Johnson Controls
product: Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior
vendor: Johnson Controls
product: Kantech EntraPass Security Management Software Corporate Edition versions 8.22 and prior
vendor: Johnson Controls
product: Kantech EntraPass Security Management Software Global Edition versions 8.22 and prior
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2020-05-26T20:05:08.000Z
CVE-2020-9047 exacqVision Software - Improper Verification of Cryptographic Signature
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.
Problem types: cwe_id: CWE-347
description: CWE-347: Improper Verification of Cryptographic Signature
Affected products: vendor: Johnson Controls
product: exacqVision Web Service versions 20.03.2.0 and prior
vendor: Johnson Controls
product: exacqVision Enterprise Manager versions 20.03.3.0 and prior
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L
version: 3.1
Credits: lang: en
value: Michael Norris
Published: 2020-06-26T18:01:48.000Z
CVE-2020-9048 victor Web Client - Arbitrary File Deletion Vulnerability
A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack.
Problem types: cwe_id: CWE-285
description: CWE-285 : Improper Access Control (Authorization)
Affected products: vendor: Johnson Controls
product: victor Web Client version 5.4.1 and prior
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
version: 3.1
Credits: lang: en
value: Joachim Kerschbaumer reported this vulnerability to Johnson Controls, Inc.
Published: 2020-10-08T17:29:08.524Z
CVE-2020-9049 victor Web Client and C•CURE Web Client JSON Web Token (JWT) Vulnerability
A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid authentication/authorization. Under certain circumstances, this could be used by an attacker to impact system availability by conducting a Denial of Service attack.
Problem types: cwe_id: CWE-285
description: CWE-285 : Improper Access Control (Authorization)
Affected products: vendor: Johnson Controls
product: victor Web Client version 5.6 and prior
vendor: Johnson Controls
product: C•CURE Web Client version 2.90 and prior (Note - This does not affect the new web-based C•CURE 9000 client that was introduced in C•CURE 9000 v2.90)
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
version: 3.1
Credits: lang: en
value: Joachim Kerschbaumer reported this vulnerability to Johnson Controls, Inc.
Published: 2020-11-19T15:27:09.782Z
CVE-2020-9050 Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
Problem types: description: CWE 22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Johnson Controls
product: Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: TIM Security Team Red Research
Published: 2021-02-19T17:12:36.690Z
CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve authentication by using the weblogin.cgi CGI executable. This program fails to properly sanitize the username parameter that is passed to it. If the username parameter contains certain characters, it can allow command injection with the privileges of the web server that runs on the ZyXEL device. Although the web server does not run as the root user, ZyXEL devices include a setuid utility that can be leveraged to run any command with root privileges. As such, it should be assumed that exploitation of this vulnerability can lead to remote code execution with root privileges. By sending a specially-crafted HTTP POST or GET request to a vulnerable ZyXEL device, a remote, unauthenticated attacker may be able to execute arbitrary code on the device. This may happen by directly connecting to a device if it is directly exposed to an attacker. However, there are ways to trigger such crafted requests even if an attacker does not have direct connectivity to a vulnerable devices. For example, simply visiting a website can result in the compromise of any ZyXEL device that is reachable from the client system. Affected products include: NAS326 before firmware V5.21(AAZF.7)C0 NAS520 before firmware V5.21(AASZ.3)C0 NAS540 before firmware V5.21(AATB.4)C0 NAS542 before firmware V5.21(ABAG.4)C0 ZyXEL has made firmware updates available for NAS326, NAS520, NAS540, and NAS542 devices. Affected models that are end-of-support: NSA210, NSA220, NSA220+, NSA221, NSA310, NSA310S, NSA320, NSA320S, NSA325 and NSA325v2
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: ZyXEL
product: NAS326
vendor: ZyXEL
product: NAS520
vendor: ZyXEL
product: NAS540
vendor: ZyXEL
product: NAS542
vendor: ZyXEL
product: NSA210
vendor: ZyXEL
product: NSA220
vendor: ZyXEL
product: NSA220+
vendor: ZyXEL
product: NSA221
vendor: ZyXEL
product: NSA310
vendor: ZyXEL
product: NSA320
vendor: ZyXEL
product: NSA320S
vendor: ZyXEL
product: NSA325
vendor: ZyXEL
product: NSA325v2
Credits: lang: en
value: Thanks to Alex Holden of Hold Security for finding and reporting this vulnerability.
Published: 2020-03-04T19:30:18.400Z
CVE-2020-9055 Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript
Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Versiant
product: LYNX Customer Service Portal
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 3.9
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
version: 3.1
Published: 2020-03-30T20:50:27.102Z
CVE-2020-9056 Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting
Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of the user, which could possibly cause website redirection, session hijacking, or information disclosure. This vulnerability has been patched in BuySpeed version 15.3.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Periscope Holdings
product: BuySpeed
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 3.9
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
version: 3.1
Published: 2020-04-10T18:35:23.402Z
CVE-2020-9057 
Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware upgrades cannot directly address this vulnerability as it is an issue with the Z-Wave specification for these legacy chipsets. One way to protect against this vulnerability is to use 500 or 700 series chipsets that support Security 2 (S2) encryption. As examples, the Linear WADWAZ-1 version 3.43 and WAPIRZ-1 version 3.43 (with 300 series chipsets) are vulnerable.
Problem types: cwe_id: CWE-311
description: CWE-311 Missing Encryption of Sensitive Data
Affected products: vendor: Linear
product: WADWAZ-1
vendor: Linear
product: WAPIRZ-1
vendor: Silicon Labs
product: 100 series
vendor: Silicon Labs
product: 200 series
vendor: Silicon Labs
product: 300 series
Credits: lang: en
value: Carlos Nkuba Kayembe, Kim Seulbae, Sven Dietrich, and Heejo Lee
Published: 2022-01-07T04:30:23.469Z
CVE-2020-9058 
Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.
Problem types: cwe_id: CWE-311
description: CWE-311 Missing Encryption of Sensitive Data
Affected products: vendor: Linear
product: LB60Z-1
vendor: Dome
product: DM501
vendor: Jasco
product: ZW4201
vendor: Silicon Labs
product: 500 series
Credits: lang: en
value: Carlos Nkuba Kayembe, Kim Seulbae, Sven Dietrich, and Heejo Lee
Published: 2022-01-07T04:30:25.088Z
CVE-2020-9059 
Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level.
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: Schlage
product: BE468
vendor: Silicon Labs
product: 500 series
Credits: lang: en
value: Carlos Nkuba Kayembe, Kim Seulbae, Sven Dietrich, and Heejo Lee
Published: 2022-01-07T04:30:26.522Z
CVE-2020-9060 
Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A version 3.95, and Fibaro FGWPB-111 version 4.3, are susceptible to denial of service and resource exhaustion via malformed SECURITY NONCE GET, SECURITY NONCE GET 2, NO OPERATION, or NIF REQUEST messages.
Problem types: cwe_id: CWE-346
description: CWE-346 Origin Validation Error
cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: ZooZ
product: ZEN25
vendor: ZooZ
product: ZEN20
vendor: ZooZ
product: ZST10
vendor: Fibaro
product: FGWPB-111
vendor: Silicon Labs
product: 500 series
vendor: Aeon Labs
product: ZW090-A
Credits: lang: en
value: Carlos Nkuba Kayembe, Kim Seulbae, Sven Dietrich, and Heejo Lee
Published: 2022-01-07T04:30:28.026Z