PT-2023-23452 · Kerui · Kerui W18 Alarm System

Ash Allen · Publicado 2023-05-23 · Atualizado 2025-01-17 · CVE-2023-31759

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kerui W18 Alarm System version 1.0

Description The issue concerns weak security in the 433MHz keyfob of the Kerui W18 Alarm System, allowing attackers to gain full access via a code replay attack.

Recommendations For Kerui W18 Alarm System version 1.0, consider disabling the 433MHz keyfob functionality until a patch or fix is available to prevent code replay attacks.

Correção

Enumeração de Fraquezas

CWE-294

Identificadores relacionados

CVE-2023-31759

Produtos afetados

Kerui W18 Alarm System

Referências · 8

• https://ashallen.net/wireless-alarm-system-vulnerability-disclosure · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-31759 · Nota de Segurança
• https://ashallen.net/wireless-alarm-system-vulnerabilities · Nota
• https://t.me/cvenotify/51012 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-31759 · Aviso do Fabricante
• https://t.me/cibsecurity/64662 · Publicação no Telegram
• https://t.me/cvenotify/107818 · Publicação no Telegram
• https://t.me/cvenotify/51589 · Publicação no Telegram