Lucene search
+L

948 matches found

EUVD
EUVD
added 2026/02/15 11:03 a.m.11 views

EUVD-2026-5831

The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires sending two previously captured codes in a specific sequence. As a result, the system can be forced to accept previously used stale rolling codes and execute a command...

8.4CVSS5.6AI score0.00208EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/15 11:03 a.m.7 views

CVE-2026-2540

The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires sending two previously captured codes in a specific sequence. As a result, the system can be forced to accept previously used stale rolling codes and execute a command...

8.4CVSS5.5AI score0.00208EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/15 11:03 a.m.66 views

CVE-2026-2540

The CVE-2026-2540 entry describes a flaw in the Micca KE700 system where flawed resynchronization logic allows replay of previously captured codes in a specific sequence. This enables the system to accept stale rolling codes, potentially executing a command and cloning the alarm key, which could ...

8.4CVSS5.5AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/15 10:58 a.m.27 views

CVE-2026-2539

The CVE-2026-2539 affects the Micca KE700 car alarm system where the RF protocol transmits data frames in cleartext. The vulnerability arises because random numbers and counters used for authentication are captured via radio interception, enabling an attacker to obtain sensitive authentication-re...

7.1CVSS5.5AI score0.00128EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/15 10:58 a.m.7 views

CVE-2026-2539 Micca KE700 Cleartext transmission of key fob ID

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

7.1CVSS5.5AI score0.00128EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/15 10:58 a.m.5 views

CVE-2026-2539

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

7.1CVSS5.5AI score0.00128EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/15 10:58 a.m.7 views

EUVD-2026-5832

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool e.g., SDR can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication...

7.1CVSS5.5AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/15 12:00 a.m.13 views

Micca KE700 安全漏洞

The Micca KE700 is a source bookshelf speaker from the Micca company. The Micca KE700 has a security vulnerability, which stems from a flaw in the logic for resynchronization. This vulnerability could lead to replay attacks, allowing attackers to clone alarm keys and gain unauthorized access to...

8.4CVSS5.8AI score0.00208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/15 12:00 a.m.19 views

PT-2026-8235

The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires sending two previously captured codes in a specific sequence. As a result, the system can be forced to accept previously used stale rolling codes and execute a command...

8.4CVSS5.5AI score0.00208EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/12 1:04 a.m.11 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

9.8CVSS5.6AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/11 11:16 p.m.10 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

9.8CVSS0.00349EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/11 12:00 a.m.4 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

5.6AI score0.00349EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/11 12:00 a.m.14 views

CVE-2025-67135

CVE-2025-67135 affects PGST PG107 Alarm System 1.25.05.hf via the PF-50 1.2 keyfob. The root cause is weak security in the keyfob enabling code replay attacks that compromise access control. Exploitation is not described in the provided documents; CVSSv3.1 indicates a critical impact (AV:N/AC:L/P...

9.8CVSS5.6AI score0.00349EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/11 12:00 a.m.6 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

5.6AI score0.00349EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/11 12:00 a.m.38 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

0.00349EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.10 views

PT-2026-7741

Name of the Vulnerable Software and Affected Versions PGST PG107 Alarm System version 1.25.05.hf PF-50 keyfob version 1.2 Description A security weakness exists in the PF-50 1.2 keyfob used with the PGST PG107 Alarm System version 1.25.05.hf. This weakness allows attackers to compromise access...

9.8CVSS5.5AI score0.00349EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/07 12:15 a.m.11 views

CVE-2020-37159

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution...

9.8CVSS0.00615EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/07 12:00 a.m.15 views

Parallaxis Cuckoo Clock 安全漏洞

Parallaxis Cuckoo Clock is a desktop clock software developed by Parallaxis Corporation. Version 5.0 of Parallaxis Cuckoo Clock contains a security vulnerability, which stems from a buffer overflow in the alarm scheduling function. This vulnerability could allow for the execution of arbitrary cod...

9.8CVSS6.3AI score0.00615EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/06 11:14 p.m.28 views

CVE-2020-37159

CVE-2020-37159 affects Parallaxis Cuckoo Clock 5.0. A buffer overflow in the alarm scheduling feature allows an attacker to execute arbitrary code by overwriting memory registers; a payload exceeding 260 bytes can overwrite EIP/EBP and enable shellcode execution, with potential remote code execut...

9.8CVSS6.9AI score0.00615EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/06 11:14 p.m.38 views

CVE-2020-37159 Cuckoo Clock 5.0 - Buffer Overflow

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution...

9.8CVSS0.00615EPSS
SaveExploits0References3
Rows per page
Query Builder