Missing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow attackers to create a cloned tag via brief physical proximity to one of the original tags, which results in an attacker being able to bring the alarm system to a disarmed state.
References
Link | Resource |
---|---|
https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices | Third Party Advisory |
https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices | Third Party Advisory |
Configurations
History
21 Nov 2024, 08:36
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices - Third Party Advisory |
19 Jan 2024, 14:33
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
CPE | cpe:2.3:a:hozard:alarm_system:1.0:*:*:*:*:*:*:* | |
References | () https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices - Third Party Advisory | |
First Time |
Hozard alarm System
Hozard |
|
CWE | CWE-311 |
11 Jan 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-11 21:15
Updated : 2024-11-21 08:36
NVD link : CVE-2023-50126
Mitre link : CVE-2023-50126
CVE.ORG link : CVE-2023-50126
JSON object : View
Products Affected
hozard
- alarm_system
CWE
CWE-311
Missing Encryption of Sensitive Data