PT-2019-13569 · Abus · Abus Secvest Fuaa50000

Matthias Deeg + 1 · Published 2019-07-26 · Updated 2019-09-05 · CVE-2019-14261

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ABUS Secvest FUAA50000 version 3.01.01

Description An issue was discovered due to an insufficient implementation of jamming detection. This allows an attacker to suppress correctly received RF messages sent between wireless peripheral components and the ABUS Secvest alarm central. The attacker can perform a "reactive jamming" attack by detecting the start of a RF message and overlaying it with random data before the original message ends, preventing the receiver from properly decoding the signal. This enables the suppression of correctly received RF messages, including status messages from detectors indicating an intrusion.

Recommendations For ABUS Secvest FUAA50000 version 3.01.01, consider implementing additional jamming detection mechanisms to prevent reactive jamming attacks. As a temporary workaround, restrict the use of wireless peripheral components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2019-14261

Affected Products

Abus Secvest Fuaa50000

References · 7

• https://osv.dev/vulnerability/CVE-2019-14261 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14261 · Security Note
• http://packetstormsecurity.com/files/153780/ABUS-Secvest-3.01.01-Unchecked-Message-Transmission-Error-Condition.html · Note
• https://seclists.org/bugtraq/2019/Jul/52 · Note
• https://t.me/defcon_news/20099 · Telegram Post
• http://seclists.org/fulldisclosure/2019/Jul/30 · Note
• https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-004.txt · Note