Detections
Analytics

CVE-2020-14157

high

Description

The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easier for an attacker to disarm the wireless alarm system.

References

http://seclists.org/fulldisclosure/2020/Jun/26

http://packetstormsecurity.com/files/158204/ABUS-Secvest-Wireless-Control-Device-Missing-Encryption.html

https://www.youtube.com/watch?v=kCqAVYyahLc

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-014.txt

Details

Source: Mitre, NVD

Published: 2020-06-17

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.8

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 8.1

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: High

EPSS

EPSS: 0.00058