CVE-2019-9860 - CVE House
Back to Database
Status published High CVE-2019-9860

Due to unencrypted signal communication and predictability of rolling codes,...

Vulnerability Description

Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014 or FUBE50015) relative to its controlled Secvest wireless alarm system FUAA50000 3.01.01, so that sent commands by the remote control are not accepted anymore.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-9860

Credits & Attribution

No credits recorded in the NVD database.

References

More from abus

View All →
CVE-2020-28973
The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to...
High 7.5
CVE-2020-14158
The ABUS Secvest FUMO50110 hybrid module does not have any...
Critical 9.1
CVE-2020-14157
The wireless-communication feature of the ABUS Secvest FUBE50001 device does...
High 8.1
CVE-2019-9863
Due to the use of an insecure algorithm for rolling...
Critical 9.8
CVE-2019-9862
An issue was discovered on ABUS Secvest wireless alarm system...
Medium 6.5

Affected Vendor

Affected Software

secvest wireless alarm system fuaa50000 firmware, secvest wireless remote control fube50014 firmware, secvest wireless remote control fube50015 firmware
Vulnerable Versions:
3.01.01

Timeline

Official Publish: March 27th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.