CVE-2018-25029 Security feature bypass in Z-Wave
Attackers can downgrade Z-Wave security during pairing to intercept and spoof traffic, affecting IoT devices using Silicon Labs Z-Wave.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-25029?
CVE-2018-25029 is a high-severity vulnerability in Silicon Labs Z-Wave, published on 4 Feb 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (CVE-2013-20003) to intercept and spoof traffic.
Weakness: CWE-757
Which versions are affected by CVE-2018-25029?
It affects 5 products.
Products include Silabs Zgm130s037hgn Firmware, Silabs Zgm2305a27hgn Firmware, Silabs Zgm230sb27hgn Firmware, Silabs Zm5101 Firmware, Silabs Zm5202 Firmware.
How do I fix CVE-2018-25029?
No fix has been published for CVE-2018-25029 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-25029 being exploited?
There is no known exploitation of CVE-2018-25029 in the wild and no public exploit code.
Other vulnerabilities in Silicon Labs Z-Wave
Sources
Also known as GHSA-v7cj-26wg-65rw.