CVE-2023-50128
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
The vulnerability in the Hozard alarm system v1.0 involves sending an identical radio frequency signal for each request, allowing an attacker to perform replay attacks and disarm the alarm.
Risk Assessment
An attacker can remotely disarm the alarm without authorization, exposing the organization to theft or burglary.
Recommendation
Update the alarm software to a version that implements rolling codes or encryption to prevent replay attacks.
Original NVD description (English source)
The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.

