CVE-2023-50126

Missing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow attackers to create a cloned tag via brief physical proximity to one of the original tags, which results in an attacker being able to bring the alarm system to a disarmed state.
Configurations

Configuration 1 (hide)

cpe:2.3:a:hozard:alarm_system:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 08:36

Type Values Removed Values Added
References () https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices - Third Party Advisory () https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices - Third Party Advisory

19 Jan 2024, 14:33

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:hozard:alarm_system:1.0:*:*:*:*:*:*:*
References () https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices - () https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices - Third Party Advisory
First Time Hozard alarm System
Hozard
CWE CWE-311

11 Jan 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-11 21:15

Updated : 2024-11-21 08:36


NVD link : CVE-2023-50126

Mitre link : CVE-2023-50126

CVE.ORG link : CVE-2023-50126


JSON object : View

Products Affected

hozard

  • alarm_system
CWE
CWE-311

Missing Encryption of Sensitive Data