CVE-2020-10137

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NODE_IN_RANGE frame with an invalid random payload, denying service by blocking the processing of upcoming events.

• CWE-345
• CWE-345

• https://doi.org/10.1109/ACCESS.2021.3138768Broken Link
• https://github.com/CNK2100/VFuzz-publicThird Party Advisory
• https://ieeexplore.ieee.org/document/9663293Broken Link
• https://kb.cert.org/vuls/id/142629Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/142629Third Party Advisory, US Government Resource
• https://doi.org/10.1109/ACCESS.2021.3138768Broken Link
• https://github.com/CNK2100/VFuzz-publicThird Party Advisory
• https://ieeexplore.ieee.org/document/9663293Broken Link
• https://kb.cert.org/vuls/id/142629Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/142629Third Party Advisory, US Government Resource

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10130SearchBlox before Version 9.1 is vulnerable to business logi…8.8
• CVE-2020-10131SearchBlox before Version 9.2.1 is vulnerable to CSV macro i…9.8
• CVE-2020-10132SearchBlox before Version 9.1 is vulnerable to cross-origin …6.1
• CVE-2020-10134Pairing in Bluetooth® Core v5.2 and earlier may permit an un…6.3
• CVE-2020-10135Legacy pairing and secure-connections pairing authentication…5.4
• CVE-2020-10136IP-in-IP protocol specifies IP Encapsulation within IP stand…5.3
• CVE-2020-10138Acronis Cyber Backup 12.5 and Cyber Protect 15 include an Op…7.8
• CVE-2020-10139Acronis True Image 2021 includes an OpenSSL component that s…7.8
• CVE-2020-1014An elevation of privilege vulnerability exists in the Micros…7.8
• CVE-2020-10140Acronis True Image 2021 fails to properly set ACLs of the C:…7.3
• CVE-2020-10143Macrium Reflect includes an OpenSSL component that specifies…7.8
• CVE-2020-10145The Adobe ColdFusion installer fails to set a secure access-…7.8