CVE-2020-9058: Dome DM501

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

Affected products

• Dome DM501: version 4.26 only
• Jasco ZW4201: version 4.05 only
• Linear LB60Z-1: version 3.5 only
• Silabs 500 Series Firmware: any version

Published 2022-01-10. Last modified 2026-06-17.