CVE:CVE-2020-9060
CNNVD:CNNVD-202201-599
Silicon Labs Z-Wave Chipsets是美国Silicon Labs公司的一种智能家居生态系统中的芯片组。
多款 z-wave 设备中存在资源管理错误漏洞，该漏洞源于产品未能正确处理 SECURITY NONCE GET、SECURITY NONCE GET 2、NO OPERATION、NIF REQUEST 信息。攻击者可通过该漏洞导致拒绝服务。
solution:Upgrade silabs 500_series_firmware to a higher version than *; Upgrade aeotec zw090-a to a higher version than 3.95,and avoid the version 3.95; Upgrade fibaro fgwpb-111 to a higher version than 4.3,and avoid the version 4.3; Upgrade zooz zen20 to a higher version than 5.03,and avoid the version 5.03; Upgrade zooz zen25 to a higher version than 5.03,and avoid the version 5.03; Upgrade zooz zst10 to a higher version than 6.04,and avoid the version 6.04