PT-2020-20728
CVE-2020-9550
·
Published
2020-03-04
·
Updated
2020-03-06
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Rubetek SmartHome 2020 devices
Description
The issue concerns the use of unencrypted 433 MHz communication between controllers and beacons in Rubetek SmartHome 2020 devices. This allows an attacker to remotely sniff and spoof beacon requests.
Recommendations
For Rubetek SmartHome 2020 devices, consider implementing encryption for the 433 MHz communication between controllers and beacons to prevent sniffing and spoofing of beacon requests.
Found an issue in the description? Have something to add? Feel free to write us 👾