PT-2019-19895

Name of the Vulnerable Software and Affected Versions ABUS Secvest wireless alarm system FUAA50000 version 3.01.01 ABUS Secvest wireless remote control versions FUBE50014 or FUBE50015 Description The issue arises from unencrypted signal communication and the predictability of rolling codes in the...

Design/Logic Flaw

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm...

CVE-2019-9659

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm...

CVE-2019-9659

CVE-2019-9659 affects the Chuango 433 MHz burglar-alarm product line, where static RF remote codes enable replay-based arming, disarming, or triggering the alarm. The NVD description confirms the vulnerability stems from fixed code sequences used by the remote controls, allowing an attacker to re...

CVE-2019-9659: Authentication Bypass by Capture-replay

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm...

PT-2019-19783

Name of the Vulnerable Software and Affected Versions Chuango 433 MHz burglar-alarm product line affected versions not specified Eminent EM8617 OV2 Wifi Alarm System affected versions not specified Description The issue concerns the use of static codes in the RF remote control of the affected...

Starbucks: Thailand – a small number of alarm system portals accessible with the default credentials

radoooz discovered that a small number of AAP IP Module alarm system portals in Thailand were accessible, utilizing their default credentials. @radoooz — thank you for reporting this vulnerability and confirming the resolution...

"Two Stage" BMW Theft Attempt

Modern cars have alarm systems that automatically connect to a remote call center. This makes cars harder to steal, since tripping the alarm causes a quick response. This article describes a theft attempt that tried to neutralize that security system. In the first attack, the thieves just disable...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11399

CVE-2018-11399 affects SimpliSafe Original: sensors transmit data unencrypted, enabling physically proximate attackers to infer when alarm events occur. Root cause: lack of encryption in sensor transmissions. Impact: potential disclosure of timing of events; confidentiality partially affected. Ex...

Authentication Bypass allows alarm's commands execution in iSmartAlarm(CVE-2017-7728)

Vendor: iSmartAlarm, inc. Product: iSmartAlarm cube - All iSmartAlarm is one of the leading IoT manufactures in the domain of smart alarm systems. It provides a fully integrated alarm system with siren, smart cameras and locks. It functions like any alarm system, but with the benefits of a...

iSmartAlarm CubeOne Remote Command Execution

Credits: Ilia Shnaidman + @0x496c on Twitter + Source: http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/ Vendor: ============= iSmartAlarm, inc. Product: =========================== iSmartAlarm cube - All iSmartAlarm is one of the...

CVE-2014-8362

Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...

CVE-2014-8362

Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...

Mitsubishi Outlander mixing vehicles storage security breaches-hacking-vulnerability warning-the black bar safety net

According to the BBC 6 on 6 reported, the researchers found that the Mitsubishi Outlander hybrid vehicle Wi-Fi there is a security vulnerability, easy hacking, and turn off the vehicle alarm system. This means that criminals could exploit the vulnerability into the vehicle or steal the vehicle, o...

CSL DualCom GPRS CS2300-R SPT Man-in-the-Middle Attack Vulnerability

The CSL DualCom GPRS CS2300-R SPT is an alarm signaling board from CSL DualCom, UK, which provides a communication link between the burglar alarm and the monitoring center, allowing signals to be sent to the monitoring center when the alarm goes off, via the mobile network, ordinary phone lines o...

PT-2014-1986

Name of the Vulnerable Software and Affected Versions Vivint Sky Control Panel version 1.1.1.9926 Description The issue is related to the lack of authentication for critical functions in the Vivint Sky Control Panel web application. This allows a remote attacker to enable and disable the alarm...