CVE-2018-19982

An issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not implemented. The communication architecture is APP > Server > Controller (HUB) > Node (products which are controlled by HUB). The prerequisite is that the attacker is on the same network as the target HUB, and can use IP Changer to change destination IP addresses (of all packets whose destination IP address is Server) to a proxy-server IP address. This allows sniffing of cleartext between Server and Controller. The cleartext command data is transmitted to Controller using the proxy server's fake certificate, and it is able to control each Node of the HUB. Also, by operating HUB in Z-Wave Pairing Mode, it is possible to obtain the Z-Wave network key.

• CWE-295

• https://github.com/min1233/CVE/blob/master/1Third Party Advisory
• https://github.com/min1233/CVE/blob/master/1Third Party Advisory

Published

Dec 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19976In YARA 3.8.1, bytecode in a specially crafted compiled rule…
• CVE-2018-19977A command injection (missing input validation, escaping) in …
• CVE-2018-19978A buffer overflow vulnerability in the DHCP and PPPOE config…
• CVE-2018-1998IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local u…8.8
• CVE-2018-19980Anker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attack…
• CVE-2018-19981Amazon AWS SDK <=2.8.5 for Android uses Android SharedPrefer…
• CVE-2018-19983An issue was discovered on Sigma Design Z-Wave S0 through S2…
• CVE-2018-19985The function hso_get_config_data in drivers/net/usb/hso.c in…
• CVE-2018-19986In the /HNAP1/SetRouterSettings message, the RemotePort para…
• CVE-2018-19987D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-86…
• CVE-2018-19988In the /HNAP1/SetClientInfoDemo message, the AudioMute and A…
• CVE-2018-19989In the /HNAP1/SetQoSSettings message, the uplink parameter i…