CVE-2019-9861

Опубликовано: 14 мая 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 4.8

EPSS Низкий

Описание

Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.

Ссылки

http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/May/3
Exploit
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2019/May/1
Exploit
Mailing List
Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/May/3
Exploit
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2019/May/1
Exploit
Mailing List
Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:abus:secvest_wireless_alarm_system_fuaa50000_firmware:3.01.01:*:*:*:*:*:*:*

cpe:2.3:h:abus:secvest_wireless_alarm_system_fuaa50000:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00831

Низкий

8.1 High

CVSS3

4.8 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-mjxp-pfh5-29xr