CVE-2019-9659
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control,...
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
- Record
CVE-2019-9659- CVSS 3.0
- 9.1 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H - CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-294
- Updated
- 2026-11-02
CVE List No score
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
- Record
CVE-2019-9659- Updated
- 2026-11-02
EUVDEUVD-2019-19025 No score
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
- Record
EUVD-2019-19025- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9c2v-c4r3-gwmm
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control,...
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
- Record
GHSA-9c2v-c4r3-gwmm- CVSS 3.0
- 9.1 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-294
- Updated
- 2026-11-02
Affected products
- chuango a11 pstn\/lcd\/rfid touch alarm system firmware
- chuango a8 pstn alarm system firmware
- chuango awv plus wifi alarm system firmware
- chuango b11 dual-network alarm system firmware
- chuango cg-105s on-site alarm system firmware
- chuango g3 gsm\/sms alarm system firmware
- chuango g5 plus gsm\/sms\/rfid touch alarm system firmware
- chuango g5w 3g firmware
- chuango wifi\/cellular smart home system h4 plus firmware
- chuango wifi alarm system firmware
- eminent em8617 ov2 wifi alarm system firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-9659 is a critical vulnerability (CVSS 9.1) in Chuango A11 Pstn\/lcd\/rfid Touch Alarm System Firmware, published March 11, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.33%, the 71st percentile. No source names a fixed version.