Vulnerability in Abus Secvest_wireless_alarm_system_fuaa50000

CVE-2019-9861

Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)
  • cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2019-9861?
CVE-2019-9861 is a high-severity vulnerability in Abus Secvest_wireless_alarm_system_fuaa50000, classified under Cryptographic Issues. CVSS score: 8.1/10. Published 2019-05-14.
How severe is CVE-2019-9861?
High severity. CVSS v3 base score is 8.1 out of 10.