Unrated severityNVD Advisory· Published Apr 21, 2021· Updated Aug 4, 2024

CVE-2020-28973

Description

The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system.

Affected products

ABUS/Secvest wireless alarm systemdescription
Abuse/Abusellm-fuzzy
Range: = v3.01.17

Patches

Vulnerability mechanics

References

eye.security/en/blog/breaking-abus-secvest-internet-connected-alarm-systems-cve-2020-28973mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000