PT-2019-19897 · Abus · Abus Secvest

Matthias Deeg + 1 · Published 2019-03-27 · Updated 2020-08-24 · CVE-2019-9862

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABUS Secvest wireless alarm system FUAA50000 version 3.01.01

Description An issue was discovered where sensitive data, such as the current rolling code state, is transmitted in cleartext due to the lack of "encrypted signal transmission". This allows an attacker to eavesdrop on the data.

Recommendations For ABUS Secvest wireless alarm system FUAA50000 version 3.01.01, consider implementing encrypted signal transmission to prevent eavesdropping of sensitive data. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2019-9862

Affected Products

Abus Secvest

References · 3

• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-035.txt · Exploit
• https://osv.dev/vulnerability/CVE-2019-9862 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9862 · Security Note