description: Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.
problem types: CWE-311 Missing Encryption of Sensitive Data
affected:
{
product: LB60Z-1
vendor: Linear
versions:
status: affected, version: 3.5
}
{
product: DM501
vendor: Dome
versions:
status: affected, version: 4.26
}
{
product: ZW4201
vendor: Jasco
versions:
status: affected, version: 4.05
}
{
product: 500 series
vendor: Silicon Labs
versions:
status: affected, version: all
}
