← Back

CVE-2019-9863

nvd nist
Published: Mar 27, 2019Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict valid future rolling codes, and can thus remotely control the alarm system in an unauthorized way.

Affected (3)

Abus
3 products
Secvest Wireless Alarm System Fuaa50000 Firmware
Secvest Wireless Remote Control Fube50014 Firmware
Secvest Wireless Remote Control Fube50015 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Secvest Wireless Alarm System Fuaa50000 Firmware
Version 3.01.01
Running on/withPlatform Versions
Abus
Secvest Wireless Alarm System Fuaa50000
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Secvest Wireless Remote Control Fube50014 Firmware
All versions
Running on/withPlatform Versions
Abus
Secvest Wireless Remote Control Fube50014
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Secvest Wireless Remote Control Fube50015 Firmware
All versions
Running on/withPlatform Versions
Abus
Secvest Wireless Remote Control Fube50015
All versions

Related CWEs

CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.