Vulnerability in Micca Auto Electronics Co., Ltd. Car Alarm System Ke700
CVE-2026-2541
The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolling code. Successful exploitation simplify an attacker to predict the next valid rolling code, granting unauthorized access to the vehicle.
EPSS: 0.002 (8.9th percentile) — read the EPSS interpretation.
Affected products
- Micca Auto Electronics Co., Ltd. Car Alarm System Ke700 — versions KE700, KE700+
Weakness classification (CWE)
References
- cve@asrg.io (third-party-advisory)