VULNERABILITY INTELLIGENCE

CVE-2020-9059

CVSS score6.5 MEDIUM
EPSS probability0.90%
CISA KEVNot currently listed
Published2022-01-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level.

Weakness classification

  • cret@cert.org: CWE-400
  • nvd@nist.gov: CWE-770

Primary references