PT-2018-15184 · Kt · Kt Mc01507L Z-Wave S0

Wyp · Published 2018-12-09 · Updated 2019-02-06 · CVE-2018-19982

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Low

Base vector

AV:A/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions KT MC01507L Z-Wave S0 devices (affected versions not specified)

Description The issue arises due to the lack of HPKP implementation, allowing an attacker on the same network as the target HUB to intercept cleartext communication between the Server and Controller. The attacker can use IP Changer to redirect packets to a proxy-server IP address, enabling them to sniff cleartext commands. By using the proxy server's fake certificate, the attacker can control each Node of the HUB. Additionally, operating the HUB in Z-Wave Pairing Mode allows the attacker to obtain the Z-Wave network key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2018-19982

Affected Products

Kt Mc01507L Z-Wave S0

References · 2

• 🔥 https://github.com/min1233/CVE/blob/master/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19982 · Security Note