CVEvulnerability
CVE-2019-9861
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-310
Description
Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.
Affected configurations
• abus secvest wireless alarm system fuaa50000 firmware 3.01.01
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/May/3 Exploit, Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/May/1 Exploit, Mailing List, Third Party Advisory
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/May/3 Exploit, Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/May/1 Exploit, Mailing List, Third Party Advisory
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt Exploit, Third Party Advisory