CVE Catalog

CVE-2023-50128

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.23%

13th percentile - higher than 13% of all known CVEs

Summary

The vulnerability in the Hozard alarm system v1.0 involves sending an identical radio frequency signal for each request, allowing an attacker to perform replay attacks and disarm the alarm.

Risk Assessment

An attacker can remotely disarm the alarm without authorization, exposing the organization to theft or burglary.

Recommendation

Update the alarm software to a version that implements rolling codes or encryption to prevent replay attacks.

Original NVD description (English source)

The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS