CVE:CVE-2018-25029
CNNVD:CNNVD-202202-339
Z-Wave是一种主要用于家庭自动化的无线通信协议。它是一种网状网络，使用低耗能无线电波在设备与设备间进行通信，从而无线控制家中电器和其他设备，例如控制照明、安全系统、恒温器、窗户、锁、游泳池和车库门开启器。
Z-Wave设备存在安全漏洞，该漏洞源于Z-Wave规范要求S2安全性可以降级为S0或其他不太安全的协议，允许配对期间无线电范围内的攻击者可利用该漏洞降级，然后利用另一个漏洞(CVE-2013-20003)来拦截和欺骗流量。
solution:Upgrade silabs zgm130s037hgn_firmware to a higher version than s2,and avoid the version s2; Upgrade silabs zm5202_firmware to a higher version than s2,and avoid the version s2; Upgrade silabs zm5101_firmware to a higher version than s2,and avoid the version s2; Upgrade silabs zgm2305a27hgn_firmware to a higher version than s2,and avoid the version s2; Upgrade silabs zgm230sb27hgn_firmware to a higher version than s2,and avoid the version s2