Silabs 700 Series Firmware vulnerabilities

2 CVEs affecting Silabs 700 Series Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9061, published 2022-01-10.

More from Silabs.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-9061, published 2022-01-10. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung…
• CVE-2020-10137, published 2022-01-10. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a…