CVE-2019-9863

Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict valid future rolling codes, and can thus remotely control the alarm system in an unauthorized way.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.15% chance of exploitation in the next 30 days, 81th percentile

Published

2019-03-27

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-034.txt

References

• CVE Record
• NVD entry

Related

• CVE-2019-9862
• CVE-2019-9874
• CVE-2019-9861
• CVE-2019-9877
• CVE-2019-9858
• CVE-2019-9878