node-zwave-js icon indicating copy to clipboard operation
node-zwave-js copied to clipboard

Notify/warn user when S0 is used unexpectedly

Open AlCalzone opened this issue 3 years ago • 0 comments
trafficstars

Discussed in https://github.com/zwave-js/node-zwave-js/discussions/4240

Essentially the user has to be notified when a) QR code inclusion is used (implies S2 and/or SmartStart), but S2 is then missing from the supported CCs b) A node is included with S0, the user didn't choose S0 and the device later claims to support S2

https://community.silabs.com/s/share/a5U1M000000knqNUAQ/updated-your-zwave-smart-locks-are-safe-and-secure?language=en_US https://nvd.nist.gov/vuln/detail/CVE-2018-25029 https://www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/

AlCalzone avatar Feb 15 '22 20:02 AlCalzone