CVEvulnerability

CVE-2019-9659

9.1 CRITICAL Published 2019-03-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-03-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-294

Description

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.

Affected configurations

• chuango wifi alarm system firmware • chuango wifi\/cellular smart home system h4 plus firmware • chuango awv plus wifi alarm system firmware • chuango g5w 3g firmware • chuango g5 plus gsm\/sms\/rfid touch alarm system firmware • chuango g3 gsm\/sms alarm system firmware • chuango b11 dual-network alarm system firmware • chuango a8 pstn alarm system firmware • chuango a11 pstn\/lcd\/rfid touch alarm system firmware • chuango cg-105s on-site alarm system firmware • eminent em8617 ov2 wifi alarm system firmware

Related

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References