Vulnerability in Abus Secvest Wireless Alarm System Fuaa50000
CVE-2019-9862
An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote control FUBE50014 or FUBE50015. Because "encrypted signal transmission" is missing, an attacker is able to eavesdrop sensitive data as cleartext (for instance, the current rolling code state).
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.006 (48.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 49th percentile — 48.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000
Affected products
- Abus Secvest Wireless Alarm System Fuaa50000
- Abus Secvest Wireless Alarm System Fuaa50000 Firmware — versions 3.01.01
- Abus Secvest Wireless Remote Control Fube50014
- Abus Secvest Wireless Remote Control Fube50014 Firmware
- Abus Secvest Wireless Remote Control Fube50015
- Abus Secvest Wireless Remote Control Fube50015 Firmware
Weakness classification (CWE)
References
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-035.txt (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2019-9862?
- CVE-2019-9862 is a medium-severity vulnerability in Abus Secvest Wireless Alarm System Fuaa50000, classified under Missing Encryption of Sensitive Data. CVSS score: 6.5/10. Published 2019-03-27.
- How severe is CVE-2019-9862?
- Medium severity. CVSS v3 base score is 6.5 out of 10.