CVE-2023-50127

Hozard alarm system Alarmsysteem v1.0 is vulnerable to Improper Authentication. Commands sent via the SMS functionality are accepted from random phone numbers, which allows an attacker to bring the alarm system to a disarmed state from any given phone number...

Hozard Alarm system security breach

Hozard alarm system is an alarm system from Hozard. A security vulnerability exists in the Hozard Alarm system, which can be exploited to send commands to control the system from an arbitrary phone number...

CVE-2023-50125

The CVE concerns the Hozard Alarm system (Alarmsysteem) v1.0, where a default engineer password enables an attacker to disarm the system. Documents consistently describe the root cause as the use of a default credentials credential, leading to potential unauthorized disarming. Reported impact is ...

PT-2024-13865

Name of the Vulnerable Software and Affected Versions Hozard alarm system Alarmsysteem version 1.0 Description The issue is related to missing encryption in the RFID tags of the Hozard alarm system, which allows attackers to create a cloned tag via brief physical proximity to one of the original...

Hozard Alarm system security breach

Hozard alarm system is an alarm system from Hozard. The Hozard Alarm system has a security vulnerability that stems from the lack of encryption of RFID tags...

Hozard alarm system security breach

Hozard alarm system is an alarm system from Hozard. A security vulnerability exists in Hozard alarm system alarmsystemen version v1.0, which originates from a remote keyless system that sends the same RF signal for each request, and can be exploited by an attacker to conduct a replay attack and...

CVE-2023-50123: Improper Restriction of Excessive Authentication Attempts

The number of attempts to bring the Hozard Alarm system alarmsystemen v1.0 to a disarmed state is not limited. This could allow an attacker to perform a brute force on the SMS authentication, to bring the alarm system to a disarmed state...

A week in security (November 13 – November 19)

Last week on Malwarebytes Labs: Signal is testing usernames so you don’t have to share your phone number State of Maine data breach impacts 1.3 million people Credit card skimming on the rise for the holiday shopping season Update now! Microsoft patches 3 actively exploited zero-days Ransomware...

CVE-2023-31759

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...

CVE-2023-31759

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...

CVE-2023-31759

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...

PT-2023-23452 · Kerui · Kerui W18 Alarm System

Name of the Vulnerable Software and Affected Versions: Kerui W18 Alarm System version 1.0 Description: The issue concerns weak security in the 433MHz keyfob of the Kerui W18 Alarm System, allowing attackers to gain full access via a code replay attack. Recommendations: For Kerui W18 Alarm System...

CVE-2023-31759: Authentication Bypass by Capture-replay

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...

CVE-2023-31759

CVE-2023-31759 affects the Kerui W18 Alarm System v1.0, specifically the 433MHz keyfob. The vulnerability enables a code replay attack to gain full system access, as described in multiple connected sources. The CVSS v3.1 metrics indicate an adjacent attack vector, high complexity, no privileges o...

CVE-2023-31759

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...

CVE-2021-40170

An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed syste...

CVE-2021-40171

The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system...

CVE-2021-40170

An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed syste...

CVE-2021-40171

The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system...

CVE-2021-40170

The CVE-2021-40170 entry describes an RF replay attack in the SecuritasHome Startpaket (HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117). The vulnerability allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals, including disarming an armed system. A...