CVE-2019-9659

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.

Metrics

CVSS 3.0 9.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-294

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659Third Party Advisory
https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659Third Party Advisory

Timeline

Published: Mar 11, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-96604.8Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.CVE-2019-96614.8Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,CVE-2019-96627.5An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted vi CVE-2019-96687.5An issue was discovered in rovinbhandari FTP through 2012-03-28. receive_file in file_transfer_functions.c allows remote attackers to cause CVE-2019-96696.1The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector. NOTE: It has been asserted that this is not a valid vulnerab CVE-2019-96709.8mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as CVE-2019-96738.8Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.CVE-2019-96747.5Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.CVE-2019-96758.1An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow v CVE-2019-96767.8Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerabil CVE-2019-96779.8The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructi CVE-2019-96787.5Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a