CVEvulnerability

CVE-2019-9863

9.8 CRITICAL Published 2019-03-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-330

Description

Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict valid future rolling codes, and can thus remotely control the alarm system in an unauthorized way.

Affected configurations

• abus secvest wireless alarm system fuaa50000 firmware 3.01.01 • abus secvest wireless remote control fube50014 firmware • abus secvest wireless remote control fube50015 firmware

Related

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References