CVE-2020-28973 - CVE House
Back to Database
Status published High CVE-2020-28973

The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to...

Vulnerability Description

The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-28973

Credits & Attribution

No credits recorded in the NVD database.

References

More from abus

View All →
CVE-2020-14158
The ABUS Secvest FUMO50110 hybrid module does not have any...
Critical 9.1
CVE-2020-14157
The wireless-communication feature of the ABUS Secvest FUBE50001 device does...
High 8.1
CVE-2019-9863
Due to the use of an insecure algorithm for rolling...
Critical 9.8
CVE-2019-9862
An issue was discovered on ABUS Secvest wireless alarm system...
Medium 6.5
CVE-2019-9861
Due to the use of an insecure RFID technology (MIFARE...
High 8.1

Affected Vendor

Affected Software

secvest wireless alarm system fuaa50000 firmware
Vulnerable Versions:
3.01.17

Timeline

Official Publish: April 21st, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.