CVE-2021-40170 — MEDIUM (6.8)

Vulnerability Description

An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed system.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Securitashome	Securitashome Alarm System Firmware	hpgw-g_0.0.2.23f_bg_u-itr-f1-bd_bl.a30.20181117
Securitashome	Securitashome Alarm System	-

Related Weaknesses (CWE)

CWE-294

References

https://www.diva-portal.org/smash/get/diva2:1600180/FULLTEXT04.pdfExploitTechnical DescriptionThird Party Advisory
https://www.securitashome.se/product.html/securitashomeVendor Advisory
https://www.diva-portal.org/smash/get/diva2:1600180/FULLTEXT04.pdfExploitTechnical DescriptionThird Party Advisory
https://www.securitashome.se/product.html/securitashomeVendor Advisory

FAQ

What is CVE-2021-40170?

CVE-2021-40170 is a vulnerability with a CVSS score of 6.8 (MEDIUM). An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to trigger arbitrary system functionality by repla...

How severe is CVE-2021-40170?

CVE-2021-40170 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-40170?

Check the references section above for vendor advisories and patch information. Affected products include: Securitashome Securitashome Alarm System Firmware, Securitashome Securitashome Alarm System.