PT-2021-22829 · Unknown · Securitashome

Published 2021-12-15 · Updated 2023-09-28 · CVE-2021-40171

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions SecuritasHome home alarm system version HPGW-G 0.0.2.23F BG U-ITR-F1-BD BL.A30.20181117

Description The issue concerns the absence of notifications for ongoing RF jamming attacks in the system. This allows an attacker to block legitimate traffic without alerting the system's owner.

Recommendations For version HPGW-G 0.0.2.23F BG U-ITR-F1-BD BL.A30.20181117, consider implementing custom notification mechanisms to detect and alert on RF jamming attacks until a formal patch or update is available. As a temporary workaround, restrict access to the system during periods of suspected jamming to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2021-40171

Affected Products

Securitashome

References · 5

• https://securitashome.se/product.html/securitashome · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40171 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40171 · Security Note
• https://t.me/cvenotify/58706 · Telegram Post
• https://diva-portal.org/smash/get/diva2:1600180/FULLTEXT04.pdf · Note