CVE-2018-25029

The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (CVE-2013-20003) to intercept and spoof traffic.

• CWE-757

• https://community.silabs.com/s/share/a5U1M000000knqNUAQ/updated-your-zwave-smart-locks-are-safe-and-secureThird Party Advisory
• https://www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/Exploit, Third Party Advisory
• https://community.silabs.com/s/share/a5U1M000000knqNUAQ/updated-your-zwave-smart-locks-are-safe-and-secureThird Party Advisory
• https://www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/Exploit, Third Party Advisory

Published

Feb 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-25023An issue was discovered in the smallvec crate before 0.6.13 …7.5
• CVE-2018-25024An issue was discovered in the actix-web crate before 0.7.15…9.8
• CVE-2018-25025An issue was discovered in the actix-web crate before 0.7.15…9.8
• CVE-2018-25026An issue was discovered in the actix-web crate before 0.7.15…9.8
• CVE-2018-25027An issue was discovered in the libpulse-binding crate before…7.5
• CVE-2018-25028An issue was discovered in the libpulse-binding crate before…7.5
• CVE-2018-2503By default, the SAP NetWeaver AS Java keystore service does …7.4
• CVE-2018-25030A vulnerability classified as problematic has been found in …2.5
• CVE-2018-25031Swagger UI 4.1.2 and earlier could allow a remote attacker t…4.3
• CVE-2018-25032zlib before 1.2.12 allows memory corruption when deflating (…7.5
• CVE-2018-25033ADMesh through 0.98.4 has a heap-based buffer over-read in s…8.1
• CVE-2018-25034A vulnerability, which was classified as problematic, has be…5.4