CVE-2018-25029: Silabs ZGM130S037HGN Firmware

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (CVE-2013-20003) to intercept and spoof traffic.

Affected products

• Silabs ZGM130S037HGN Firmware: version s2 only
• Silabs ZGM2305A27HGN Firmware: version s2 only
• Silabs ZGM230SB27HGN Firmware: version s2 only
• Silabs ZM5101 Firmware: version s2 only
• Silabs ZM5202 Firmware: version s2 only

Published 2022-02-04. Last modified 2026-06-17.