PT-2024-13867 · Unknown · Hozard Alarm System

Published 2024-01-11 · Updated 2024-01-19 · CVE-2023-50128

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Hozard alarm system version 1.0

Description The remote keyless system of the Hozard alarm system sends an identical radio frequency signal for each request, allowing an attacker to conduct replay attacks and bring the alarm system to a disarmed state.

Recommendations For Hozard alarm system version 1.0, consider implementing a unique radio frequency signal for each request to prevent replay attacks, or temporarily restrict the use of the remote keyless system until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2023-50128

Affected Products

Hozard Alarm System

References · 7

• https://osv.dev/vulnerability/CVE-2023-50128 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50128 · Security Note
• https://twitter.com/VulmonFeeds/status/1745589085547209128 · Twitter Post
• https://twitter.com/CVEnew/status/1745545645786542161 · Twitter Post
• https://secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices · Note
• https://t.me/cvenotify/68013 · Telegram Post
• http://hozard.com · Note