CVE-2019-9862

An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote control FUBE50014 or FUBE50015. Because "encrypted signal transmission" is missing, an attacker is able to eavesdrop sensitive data as cleartext (for instance, the current rolling code state).

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-03-27

Last modified

2024-08-04

Weaknesses

CWE-311

Affected products

• Secvest Wireless Alarm System Fuaa50000 Firmware (Abus)
• Secvest Wireless Remote Control Fube50014 Firmware (Abus)
• Secvest Wireless Remote Control Fube50015 Firmware (Abus)

References

• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-035.txt