CVEvulnerability

CVE-2019-9860

7.5 HIGH Published 2019-03-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-319, CWE-330

Description

Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014 or FUBE50015) relative to its controlled Secvest wireless alarm system FUAA50000 3.01.01, so that sent commands by the remote control are not accepted anymore.

Affected configurations

• abus secvest wireless alarm system fuaa50000 firmware 3.01.01 • abus secvest wireless remote control fube50014 firmware • abus secvest wireless remote control fube50015 firmware

Related

Weakness · CWE (2)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness
  • CWE-330 Use of Insufficiently Random Values weakness

References