# Cve-2020-28952 **URL:** \ **Category:** Questions & Help\ **Created:** [March 28, 2021, 7:02am UTC](https://community.homey.app/t/cve-2020-28952/45343 "2021-03-28T07:02:25Z")\ **Posts on this page:** 12\ **Page:** 2
**Author:** ![Martijn\_Hoogenbosch](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/martijn_hoogenbosch/32/10647_2.png) [@Martijn\_Hoogenbosch](https://community.homey.app/u/Martijn_Hoogenbosch)\ **Post date:** [March 28, 2021, 7:51am UTC](https://community.homey.app/t/cve-2020-28952/45343/22 "2021-03-28T07:51:12Z")
> [@\[Community Survey\] Homey v5 ZigBee Health check and statistics collection (HomeyScript)](https://community.homey.app/t/community-survey-homey-v5-zigbee-health-check-and-statistics-collection-homeyscript/44231/75): > > If you replace the card with a card that sends a notification it could be possible, but you need more specific information (Like the GUID of the user) The ? in the routing is also not 100% bullet proof, I have seen both device that can’t communicate with a good last route as devices that can communicate with still a ? in the routing table. I think it would be possible for Zigbee, but this isn’t as much of an issue. ---
**Author:** ![TedTolboom](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tedtolboom/32/12081_2.png) [@TedTolboom](https://community.homey.app/u/TedTolboom)\ **Post date:** [March 28, 2021, 7:55am UTC](https://community.homey.app/t/cve-2020-28952/45343/23 "2021-03-28T07:55:11Z")
> [@Peter\_Kawa](#): > > And hey, it’s not a very big security risk, only your neighbours or the-script-kid-on-the-block \_could- switch your lights on or the garden sprinklers right? The script-kid-on-the-block has the same entrance to your Zigbee network with a random key; just takes a bit longer… just have to wait before the neighbor adds a new device or offer one if he is in a rush. Just have to wait for a new device being added. Not as safe as Z-wave’s DSK. ---
**Author:** ![prosumer](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/prosumer/32/166478_2.png) [@prosumer](https://community.homey.app/u/prosumer)\ **Post date:** [March 28, 2021, 8:03am UTC](https://community.homey.app/t/cve-2020-28952/45343/24 "2021-03-28T08:03:19Z")
I use several Zigbee devices: - Lots of Hue bulbs & accessories, via Hue bridge - Several IKEA wall outlets, via Trådfri bridge - Single Aqara vibration sensor, via Homey (no Aqara bridge) Does this mean that for me a Zigbee reset will only affect that single Aqara sensor? ---
**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\ **Post date:** [March 28, 2021, 8:05am UTC](https://community.homey.app/t/cve-2020-28952/45343/25 "2021-03-28T08:05:53Z")
Only devices that are using Homey’s Zigbee, so yes, only the Aqara sensor in your case. ---
**Author:** ![Peter\_Kawa](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/peter_kawa/32/173848_2.png) [@Peter\_Kawa](https://community.homey.app/u/Peter_Kawa)\ **Post date:** [March 28, 2021, 12:18pm UTC](https://community.homey.app/t/cve-2020-28952/45343/26 "2021-03-28T12:18:43Z")
> [@TedTolboom](#): > > The script-kid-on-the-block has the same entrance to your Zigbee network with a random key; just takes a bit longer… > > just have to wait before the neighbor adds a new device or offer one if he is in a rush. > Just have to wait for a new device being added. > Not as safe as Z-wave’s DSK. Thanks for the additional info, true that! And it’s personal how safe one wants it / needs it to be, then it’s time for a wire 😉 ---
**Author:** ![prosumer](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/prosumer/32/166478_2.png) [@prosumer](https://community.homey.app/u/prosumer)\ **Post date:** [March 28, 2021, 7:31pm UTC](https://community.homey.app/t/cve-2020-28952/45343/27 "2021-03-28T19:31:20Z")
My Homey was affected. I had added my first and only ZigBee (Aqara vibration) sensor with firmware v4, but am currently on 5.0.4. A ZigBee reset indeed changed the network key to a much more random one. ---
**Author:** ![Dijker](https://avatars.discourse-cdn.com/v4/letter/d/b9bd4f/32.png) [@Dijker](https://community.homey.app/u/Dijker)\ **Post date:** [March 28, 2021, 8:06pm UTC](https://community.homey.app/t/cve-2020-28952/45343/28 "2021-03-28T20:06:21Z")
> [@prosumer](#): > > I use several Zigbee devices Your Homey has ONE ZigBee device. ---
**Author:** ![prosumer](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/prosumer/32/166478_2.png) [@prosumer](https://community.homey.app/u/prosumer)\ **Post date:** [March 28, 2021, 8:11pm UTC](https://community.homey.app/t/cve-2020-28952/45343/30 "2021-03-28T20:11:07Z")
> Your Homey has ONE ZigBee device. Yes, but I’m not sure what you are trying to tell me. Can you please explain your message? (Or are you only confirming what Robert already answered?) ---
**Author:** ![Peter\_Kawa](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/peter_kawa/32/173848_2.png) [@Peter\_Kawa](https://community.homey.app/u/Peter_Kawa)\ **Post date:** [March 29, 2021, 12:22am UTC](https://community.homey.app/t/cve-2020-28952/45343/31 "2021-03-29T00:22:05Z")
What I think this: All your other zigbee gear is connected to other zigbee hubs/bridges, called Hue and Tradfri. Those hubs/bridges run their own zigbee network in your house. They don’t mix with eachother, and not with Homey’s zigbee network. You have paired your devices with either Hue or Tradfri, except for the aqara sensor. The aqara sensor was paired with Homey’s zigbee network, so if you reset Homey zigbee, only your aqara sensor will need to be re-paired So no big deal to reset your Homey zigbee service. ---
**Author:** ![prosumer](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/prosumer/32/166478_2.png) [@prosumer](https://community.homey.app/u/prosumer)\ **Post date:** [March 29, 2021, 5:20am UTC](https://community.homey.app/t/cve-2020-28952/45343/32 "2021-03-29T05:20:11Z")
> [@Peter\_Kawa](#): > > So no big deal to reset your Homey zigbee service. Indeed. While that sensor is a pain to pair it took only a couple of minutes. ---
**Author:** ![Peter\_Kawa](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/peter_kawa/32/173848_2.png) [@Peter\_Kawa](https://community.homey.app/u/Peter_Kawa)\ **Post date:** [March 29, 2021, 3:29pm UTC](https://community.homey.app/t/cve-2020-28952/45343/33 "2021-03-29T15:29:14Z")
A fresh brand-new battery does the trick often > [@prosumer](#): > > that sensor is a pain to pair ---
**Author:** ![Peter\_Kawa](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/peter_kawa/32/173848_2.png) [@Peter\_Kawa](https://community.homey.app/u/Peter_Kawa)\ **Post date:** [April 1, 2021, 12:11am UTC](https://community.homey.app/t/cve-2020-28952/45343/34 "2021-04-01T00:11:09Z")
I got 4 aqara temp sensors and 4 door/window switches today. All 8 of them were paired within 2 minutes. Homey v5.0.2 - Aqara Xiaomi Zigbee app v1.2.6 [Previous page](https://community.homey.app/t/cve-2020-28952/45343.md?page=1)