{"id":"CVE-2023-50128","aliases":["EUVD-2023-54955","GHSA-j6m4-4c94-5xfw"],"status":"published","title":"The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical...","description":"The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00226,"percentile":0.13437,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-294"],"published":"2024-01-11T00:00:00Z","modified":"2026-07-09T01:18:45Z","products":[{"vendor":"hozard","product":"alarm_system"}],"references":[{"url":"https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50128"},{"url":"http://hozard.com"},{"url":"https://github.com/advisories/GHSA-j6m4-4c94-5xfw"}],"sources":{"cve":[{"id":"CVE-2023-50128","description":"The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.","status":"published","published":"2024-01-11T00:00:00Z","modified":"2026-07-09T00:29:11.791Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:35:34.923818Z"}],"euvd":[{"id":"EUVD-2023-54955","description":"The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.","status":"published","published":"2024-01-11T00:00:00Z","modified":"2026-07-09T00:29:11Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:05.313723Z"}],"ghsa":[{"id":"GHSA-j6m4-4c94-5xfw","title":"The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical...","description":"The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.","status":"published","published":"2024-01-11T21:31:22Z","modified":"2024-01-28T05:06:30Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:55:30.137349Z"}],"nvd":[{"id":"CVE-2023-50128","description":"The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.","status":"published","published":"2024-01-11T21:15:10.817Z","modified":"2026-07-09T01:18:45.63Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:09:00.788714Z"}]}}