Vulnerability Details CVE-2019-9861
Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.6%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 4.8
References
- http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html
- http://seclists.org/fulldisclosure/2019/May/3
- https://seclists.org/bugtraq/2019/May/1
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt
- http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html
- http://seclists.org/fulldisclosure/2019/May/3
- https://seclists.org/bugtraq/2019/May/1
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt
Products affected by CVE-2019-9861
-
cpe:2.3:h:abus:secvest_wireless_alarm_system_fuaa50000:-
-
cpe:2.3:o:abus:secvest_wireless_alarm_system_fuaa50000_firmware:3.01.01