PT-2019-13569 · Abus · Abus Secvest Fuaa50000

Matthias Deeg + 1 · Publicado 2019-07-26 · Atualizado 2019-09-05 · CVE-2019-14261

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ABUS Secvest FUAA50000 version 3.01.01

Description An issue was discovered due to an insufficient implementation of jamming detection. This allows an attacker to suppress correctly received RF messages sent between wireless peripheral components and the ABUS Secvest alarm central. The attacker can perform a "reactive jamming" attack by detecting the start of a RF message and overlaying it with random data before the original message ends, preventing the receiver from properly decoding the signal. This enables the suppression of correctly received RF messages, including status messages from detectors indicating an intrusion.

Recommendations For ABUS Secvest FUAA50000 version 3.01.01, consider implementing additional jamming detection mechanisms to prevent reactive jamming attacks. As a temporary workaround, restrict the use of wireless peripheral components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2019-14261

Produtos afetados

Abus Secvest Fuaa50000

Referências · 7

• http://packetstormsecurity.com/files/153780/ABUS-Secvest-3.01.01-Unchecked-Message-Transmission-Error-Condition.html · Nota
• https://osv.dev/vulnerability/CVE-2019-14261 · Aviso do Fabricante
• https://seclists.org/bugtraq/2019/Jul/52 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-14261 · Nota de Segurança
• https://t.me/defcon_news/20099 · Publicação no Telegram
• http://seclists.org/fulldisclosure/2019/Jul/30 · Nota
• https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-004.txt · Nota