CVE Catalog

CVE-2023-39842

LowCVSS 2.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.12%

2th percentile — higher than 2% of all known CVEs

Summary

Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.

Risk Assessment

The organization may be exposed to unauthorized access to the security system, potentially leading to theft or data loss.

Recommendation

It is recommended to update the system to the latest version that implements RFID tag encryption and to implement additional security measures.

Original NVD description (English source)

Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS