CVE-2019-9863

Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and…

published March 27, 2019

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

🚨 A predictable rolling code is the weak link in the ABUS Secvest wireless alarm system — imagine your security code being as easy to guess as your favorite pizza topping! 🍕 Think of the rolling codes like a chef's secret ingredient list that’s written down and left out in the open. If a clever thief knows how to read it, they can whip up the same dish — or in this case, deactivate your alarm system without breaking a sweat! An attacker could remotely disable your alarm system by predicting future rolling codes, leaving your property vulnerable and unprotected. This breach could lead to unauthorized access to your home or business, making it a potential nightmare for security!

Put simply

Think of the rolling codes like a chef's secret ingredient list that’s written down and left out in the open. If a clever thief knows how to read it, they can whip up the same dish — or in this case, deactivate your alarm system without breaking a sweat! The vulnerability arises from the use of an insecure algorithm for rolling codes in the ABUS Secvest system, allowing attackers to predict future codes and gain unauthorized control over the alarm system.

What to do

An attacker could remotely disable your alarm system by predicting future rolling codes, leaving your property vulnerable and unprotected. This breach could lead to unauthorized access to your home or business, making it a potential nightmare for security! To remediate this vulnerability, consider updating the alarm system software to the latest version provided by ABUS. Additionally, regularly change and manage your security codes for an added layer of protection. You've got this! Follow these steps to secure your system and keep your space safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02146 · 81.9th percentile
Published
2019-03-27T13:41Z
EPSS history
Timeline
  • 27 MAR 13:41Z
    Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and…
    cvelistv5