CVE-2020-14157

Published: Jun 17, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easier for an attacker to disarm the wireless alarm system.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-014.txt

x_refsource_MISC

https://www.youtube.com/watch?v=kCqAVYyahLc

x_refsource_MISC

20200623 [SYSS_2020-014]: ABUS Secvest Wireless Control Device (FUBE50001) - Missing Encryption of Sensitive Data (CWE-311) (CVE-2020-14157)

mailing-list

x_refsource_FULLDISC

http://packetstormsecurity.com/files/158204/ABUS-Secvest-Wireless-Control-Device-Missing-Encryption.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-14157

Description

Affected Products

References