CVE-2019-9659

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely…

published March 11, 2019

CVSS
—
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

🚨 A clever replay attack can let an intruder arm or disarm your Chuango alarm from afar, putting your security at risk! Think of it like a mischievous kid recording your doorbell chime and playing it back to trick the system into thinking they belong. If that chime isn’t unique, anyone can waltz right in! This vulnerability could allow an attacker to remotely control your burglar alarm, potentially leaving your home vulnerable to intrusion or making you think you're safe when you're not. The consequences? Your home security could turn into a false sense of security, which is absolutely devastating!

Put simply

Think of it like a mischievous kid recording your doorbell chime and playing it back to trick the system into thinking they belong. If that chime isn’t unique, anyone can waltz right in! The Chuango 433 MHz burglar-alarm system uses static codes in its RF remote control, making it susceptible to replay attacks. An attacker can capture these signals and resend them to arm or disarm the system without authorization.

What to do

This vulnerability could allow an attacker to remotely control your burglar alarm, potentially leaving your home vulnerable to intrusion or making you think you're safe when you're not. The consequences? Your home security could turn into a false sense of security, which is absolutely devastating! To protect yourself, consider upgrading to a security system that employs dynamic codes instead of static ones. Additionally, review any firmware updates from your manufacturer to ensure you have the latest security patches. Stay vigilant about your system configuration! You've got this! Implement these changes and you'll be back in control of your home security in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01330 · 70.8th percentile
Published
2019-03-11T15:00Z
EPSS history
Timeline
  • 11 MAR 15:00Z
    The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely…
    cvelistv5