Vulnerability in Abus Secvest_wireless_alarm_system_fuaa50000
CVE-2019-9863
Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict valid future rolling codes, and can thus…
EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Abus Secvest_wireless_alarm_system_fuaa50000
- Abus Secvest_wireless_alarm_system_fuaa50000_firmware — versions 3.01.01
- Abus Secvest_wireless_remote_control_fube50014
- Abus Secvest_wireless_remote_control_fube50014_firmware
- Abus Secvest_wireless_remote_control_fube50015
- Abus Secvest_wireless_remote_control_fube50015_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-9863?
- CVE-2019-9863 is a critical-severity vulnerability in Abus Secvest_wireless_alarm_system_fuaa50000, classified under Use of Insufficiently Random Values. CVSS score: 9.8/10. Published 2019-03-27.
- How severe is CVE-2019-9863?
- Critical severity. CVSS v3 base score is 9.8 out of 10.