Lucene search

MitreCVE-2019-9861

HistoryMay 14, 2019 - 5:29 p.m.

CVE-2019-9861

2019-05-1417:29:08

CWE-310

mitre

web.nvd.nist.gov

rfid technology

mifare classic

abus

secvest fuaa50000

wireless alarm system

vulnerability

unauthorized deactivation

cve-2019-9861

CVSS2

4.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.

Affected configurations

Nvd

Node

abussecvest_wireless_alarm_system_fuaa50000Match-

AND

abussecvest_wireless_alarm_system_fuaa50000_firmwareMatch3.01.01

VendorProductVersionCPE
abussecvest_wireless_alarm_system_fuaa50000-cpe:2.3:h:abus:secvest_wireless_alarm_system_fuaa50000:-:*:*:*:*:*:*:*
abussecvest_wireless_alarm_system_fuaa50000_firmware3.01.01cpe:2.3:o:abus:secvest_wireless_alarm_system_fuaa50000_firmware:3.01.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
abus	secvest_wireless_alarm_system_fuaa50000	-	cpe:2.3:h:abus:secvest_wireless_alarm_system_fuaa50000:-:::::::*
abus	secvest_wireless_alarm_system_fuaa50000_firmware	3.01.01	cpe:2.3:o:abus:secvest_wireless_alarm_system_fuaa50000_firmware:3.01.01:::::::*

References

packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html

seclists.org/fulldisclosure/2019/May/3

seclists.org/bugtraq/2019/May/1

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt

CVSS2

4.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Related for CVE-2019-9861