PT-2025-16370 · Ksix · Ksix Zigbee Smart Home Kit

Published 2025-04-15 · Updated 2025-04-15 · CVE-2021-27289

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ksix Zigbee smart home kit versions v1.0.3 through v1.0.12

Description A replay attack issue was discovered in the Zigbee smart home kit, where the anti-replay mechanism based on the frame counter field is improperly implemented. This allows an attacker within wireless range to resend captured packets with a higher sequence number, which the devices incorrectly accept as legitimate messages, enabling spoofed commands to be injected without authentication and triggering false alerts.

Recommendations For version v1.0.3, update the Zigbee Gateway Module to a version with a properly implemented anti-replay mechanism. For version v1.0.7, update the Door Sensor to a version with a properly implemented anti-replay mechanism. For version v1.0.12, update the Motion Sensor to a version with a properly implemented anti-replay mechanism. As a temporary workaround, consider restricting access to the Zigbee network to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2021-27289

Affected Products

Ksix Zigbee Smart Home Kit

References · 9

• 🔥 https://github.com/TheMalwareGuardian/CVE-2021-27289 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27289 · Security Note
• https://twitter.com/CVEnew/status/1912201812037513616 · Twitter Post
• https://youtube.com/watch?v=5IFUpRKEioA · Note
• https://packetstormsecurity.com/files/160331/Ksix-Zigbee-Devices-Playback-Protection-Bypass.html · Note
• https://youtube.com/watch?v=XFOy3wSlC9Q · Note
• https://exploit-db.com/exploits/49169 · Note
• https://t.me/cvedetector/22992 · Telegram Post
• https://youtube.com/watch?v=yc9IEt5IMmA · Note