Lucene search
+L

141 matches found

zdt
zdt
•added 2020/08/01 12:00 a.m.•371 views

ABUS Secvest Hybrid Module FUMO50110 Authentication Bypass Vulnerability

ABUS Secvest Hybrid module FUMO50110 suffers an authentication bypass vulnerability. The hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged between the ABUS Secvest alarm panel and the ABUS Secvest Hybrid module. Thus, an...

9.1CVSS0.01842EPSS
SaveExploits1
NVD
NVD
•added 2020/07/30 2:15 p.m.•49 views

CVE-2020-14158

The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...

9.1CVSS9.2AI score0.01842EPSS
SaveExploits1References3
Prion
Prion
•added 2020/07/30 2:15 p.m.•36 views

Authentication flaw

The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...

6.4CVSS9.1AI score0.01842EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/07/30 1:13 p.m.•61 views

CVE-2020-14158

The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...

9.2AI score0.01842EPSS
SaveExploits1References3
CVE
CVE
•added 2020/07/30 1:13 p.m.•111 views

CVE-2020-14158

The CVE-2020-14158 issue affects the ABUS Secvest FUMO50110 hybrid module, which allegedly lacks confidentiality/integrity protections for RF packets exchanged with the alarm panel. Several connected sources confirm an authentication-bypass vulnerability enabling spoofing or bypass via exposed RF...

9.1CVSS9.1AI score0.01842EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/30 12:00 a.m.•13 views

CVE-2020-14158: Improper Authentication

The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to conduct wAppLoxx authentication-bypass attacks...

9.1CVSS5.8AI score0.01842EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/07/30 12:00 a.m.•10 views

PT-2020-13899

Name of the Vulnerable Software and Affected Versions ABUS Secvest FUMO50110 hybrid module affected versions not specified Description The issue concerns the lack of security mechanisms to ensure confidentiality or integrity of RF packets exchanged with an alarm panel. This makes it easier to...

9.1CVSS0.01842EPSS
SaveExploits1References5
zdt
zdt
•added 2020/06/24 12:00 a.m.•229 views

ABUS Secvest Wireless Control Device Missing Encryption Vulnerability

The wireless communication of the ABUS Secvest Wireless Control Device FUBE50001 for transmitting sensitive data like PIN codes or IDs of used proximity chip keys RFID tokens is not encrypted. Product: ABUS Secvest Wireless Control Device FUBE50001 Manufacturer: ABUS Affected Versions: N/A Tested...

8.1CVSS0.4AI score0.00793EPSS
SaveExploits2
CNVD
CNVD
•added 2020/06/18 12:00 a.m.•27 views

ABUS Secvest FUBE50001 Information Disclosure Vulnerability

ABUS Secvest FUBE50001 is a wireless control unit from ABUS Germany. A security vulnerability exists in the wireless communication function of the ABUS Secvest FUBE50001 device, which stems from the program not encrypting sensitive data. An attacker could exploit the vulnerability to disable the...

8.1CVSS6.6AI score0.00793EPSS
SaveExploits2References1
NVD
NVD
•added 2020/06/17 8:15 p.m.•24 views

CVE-2020-14157

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys RFID tokens. This makes it easier for an attacker to disarm the wireless alarm system...

8.1CVSS0.00793EPSS
SaveExploits2References4
Prion
Prion
•added 2020/06/17 8:15 p.m.•37 views

Design/Logic Flaw

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys RFID tokens. This makes it easier for an attacker to disarm the wireless alarm system...

4.8CVSS7.9AI score0.00793EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2020/06/17 7:27 p.m.•38 views

CVE-2020-14157

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys RFID tokens. This makes it easier for an attacker to disarm the wireless alarm system...

8AI score0.00793EPSS
SaveExploits2References4
CVE
CVE
•added 2020/06/17 7:27 p.m.•108 views

CVE-2020-14157

CVE-2020-14157 affects ABUS Secvest FUBE50001: the wireless-communication feature transmits PIN codes and RFID token IDs without encryption. Root cause is missing encryption for sensitive data in the wireless channel, enabling an attacker to disarm the wireless alarm system. Documents explicitly ...

8.1CVSS7.9AI score0.00793EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/17 12:00 a.m.•14 views

CVE-2020-14157: Cleartext Transmission of Sensitive Information

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys RFID tokens. This makes it easier for an attacker to disarm the wireless alarm system...

8.1CVSS5.8AI score0.00793EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2020/06/17 12:00 a.m.•15 views

PT-2020-13898

Name of the Vulnerable Software and Affected Versions ABUS Secvest FUBE50001 device affected versions not specified Description The issue concerns the lack of encryption for sensitive data, such as PIN codes or IDs of used proximity chip keys RFID tokens, in the wireless-communication feature. Th...

8.1CVSS0.00793EPSS
SaveExploits2References7
attackerkb
attackerkb
•added 2020/02/20 9:15 p.m.•13 views

CVE-2020-6977

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE...

7.2CVSS7.5AI score0.00428EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/02/20 8:45 p.m.•52 views

CVE-2020-6977

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE...

6.6AI score0.00428EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/03 6:15 p.m.•33 views

CVE-2019-14261

An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS...

7.5CVSS7.5AI score0.02514EPSS
SaveExploits0References4
Prion
Prion
•added 2019/09/03 6:15 p.m.•30 views

Design/Logic Flaw

An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS...

5CVSS7.5AI score0.02514EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2019/09/03 5:53 p.m.•40 views

CVE-2019-14261

An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS...

7.5AI score0.02514EPSS
SaveExploits0References4
Rows per page
Query Builder