VULNERABILITY INTELLIGENCE

CVE-2019-9860

CVSS score7.5 HIGH
EPSS probability0.84%
CISA KEVNot currently listed
Published2019-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014 or FUBE50015) relative to its controlled Secvest wireless alarm system FUAA50000 3.01.01, so that sent commands by the remote control are not accepted anymore.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information
  • CWE-330: Use of Insufficiently Random Values

Primary references