CVE-2019-9861

Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.

CVSS v3.0

8.1 HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v2.0

4.8 MEDIUMAV:A/AC:L/Au:N/C:P/I:P/A:N

EPSS

1.59% chance of exploitation in the next 30 days, 74th percentile

Published

2019-05-14

Updated

2024-08-04

Proof-of-concept exploits (4)

• http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html
• http://seclists.org/fulldisclosure/2019/May/3
• https://seclists.org/bugtraq/2019/May/1
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt

References

• CVE Record
• NVD entry

Related

• CVE-2019-9858
• CVE-2019-9862
• CVE-2019-9851
• CVE-2019-9863
• CVE-2019-9849
• CVE-2019-9874