CVE-2019-9659
Last modified
CVE-2019-9659 is a vulnerability of currently unknown severity. The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.. EPSS estimates a 1.33% chance of exploitation in the next 30 days.
Description
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Chuango | Wifi Alarm System Firmware | All versions |
| Chuango | Wifi\/Cellular Smart Home System H4 Plus Firmware | All versions |
| Chuango | Awv Plus Wifi Alarm System Firmware | All versions |
| Chuango | G5w 3g Firmware | All versions |
| Chuango | G5 Plus Gsm\/Sms\/Rfid Touch Alarm System Firmware | All versions |
| Chuango | G3 Gsm\/Sms Alarm System Firmware | All versions |
| Chuango | B11 Dual-Network Alarm System Firmware | All versions |
| Chuango | A8 Pstn Alarm System Firmware | All versions |
| Chuango | A11 Pstn\/Lcd\/Rfid Touch Alarm System Firmware | All versions |
| Chuango | Cg-105s On-Site Alarm System Firmware | All versions |
| Eminent | Em8617 Ov2 Wifi Alarm System Firmware | All versions |
References
- https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659Third Party Advisory
- https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-9659?
How severe is CVE-2019-9659?
How do I fix CVE-2019-9659?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-9651An issue was discovered in SDCMS V1.7. In the \app\admin\con…
- CVE-2019-9652There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit …
- CVE-2019-9653NUUO Network Video Recorder Firmware 1.7.x through 3.3.x all…
- CVE-2019-9656An issue was discovered in LibOFX 0.9.14. There is a NULL po…8.8
- CVE-2019-9657Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Co…
- CVE-2019-9658Checkstyle before 8.18 loads external DTDs by default.
- CVE-2019-9660Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.…
- CVE-2019-9661Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/…
- CVE-2019-9662An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache mana…
- CVE-2019-9668An issue was discovered in rovinbhandari FTP through 2012-03…7.5
- CVE-2019-9669The Wordfence plugin 7.2.3 for WordPress allows XSS via a un…
- CVE-2019-9670mailboxd component in Synacor Zimbra Collaboration Suite 8.7…9.8
Are you affected by CVE-2019-9659?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST