critical9.1
CVE-2019-9659
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely v…
Impact
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chuango | Wifi Alarm System Firmware | All versions |
| Chuango | Wifi\/Cellular Smart Home System H4 Plus Firmware | All versions |
| Chuango | Awv Plus Wifi Alarm System Firmware | All versions |
| Chuango | G5w 3g Firmware | All versions |
| Chuango | G5 Plus Gsm\/Sms\/Rfid Touch Alarm System Firmware | All versions |
| Chuango | G3 Gsm\/Sms Alarm System Firmware | All versions |
| Chuango | B11 Dual-Network Alarm System Firmware | All versions |
| Chuango | A8 Pstn Alarm System Firmware | All versions |
| Chuango | A11 Pstn\/Lcd\/Rfid Touch Alarm System Firmware | All versions |
| Chuango | Cg-105s On-Site Alarm System Firmware | All versions |
| Eminent | Em8617 Ov2 Wifi Alarm System Firmware | All versions |