description: Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.
problem types: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
affected:
{
product: Z-Wave
vendor: Silicon Labs
versions:
status: affected, version: S0
}
{
product: Z-Wave
vendor: Sierra Designs
versions:
lessThan: S0, status: affected, version: S0, versionType: custom
}
