CVE-2025-67135 in PF-50
Summary
by MITRE • 02/12/2026
Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 02/13/2026
The vulnerability identified as CVE-2025-67135 affects the PF-50 1.2 keyfob within the PGST PG107 Alarm System version 1.25.05.hf, representing a critical weakness in access control security mechanisms. This issue stems from insufficient cryptographic protection and lack of proper authentication validation within the keyfob's communication protocol, creating a significant pathway for unauthorized access to secured environments. The vulnerability specifically manifests through code replay attacks that exploit the system's failure to implement robust session management or unique identifier generation for each access request.
The technical flaw resides in the implementation of the keyfob's communication protocol which fails to incorporate proper cryptographic safeguards against replay attacks. This weakness allows attackers to capture legitimate access codes during transmission and subsequently reuse them to gain unauthorized entry. The vulnerability aligns with CWE-310, which addresses cryptographic weaknesses and specifically targets insufficient randomization or lack of proper cryptographic protection in authentication mechanisms. The system's inability to validate the freshness of access codes or implement time-based authentication creates an environment where static codes can be effectively reused by malicious actors.
The operational impact of this vulnerability extends beyond simple unauthorized access, potentially enabling attackers to compromise entire security infrastructures within facilities protected by the PGST PG107 Alarm System. The attack vector allows for systematic compromise of access control points without requiring sophisticated technical skills, making it particularly dangerous for organizations relying on physical security measures. The vulnerability affects the fundamental security principle of authentication by enabling code reuse attacks that bypass the intended access control mechanisms. This weakness directly impacts the system's ability to maintain integrity and confidentiality of access permissions, as outlined in the NIST SP 800-53 security controls for access control and authentication.
Mitigation strategies should focus on implementing strong cryptographic protections, including the use of time-based authentication tokens or challenge-response mechanisms that prevent code reuse attacks. Organizations should consider immediate firmware updates if available, or implement network-level monitoring to detect anomalous access patterns that might indicate replay attack activity. The remediation approach should align with ATT&CK technique T1566, which addresses credential harvesting through social engineering and replay attacks. Additionally, implementing multi-factor authentication mechanisms and regular access code rotation can significantly reduce the attack surface. Security teams should also consider deploying intrusion detection systems specifically configured to identify and alert on suspicious access patterns that may indicate successful exploitation of this vulnerability.