Summaryinfo

A vulnerability was found in Monolith EASY HOME Alarmanlagen-Set. It has been declared as problematic. This issue affects some unknown processing. The manipulation results in improper authentication (RFID). There is no exploit available.

Detailsinfo

A vulnerability classified as problematic has been found in Monolith EASY HOME Alarmanlagen-Set (version now known). Affected is some unknown processing. The manipulation with an unknown input leads to a improper authentication vulnerability (RFID). CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was shared 11/23/2016 by Gerhard Klostermeier with SYSS as [SYSS-2016-107] EASY HOME Alarmanlagen-Set - Cryptographic Issues (CWE-310) as confirmed mailinglist post (Full-Disclosure). The advisory is available at seclists.org. The vendor cooperated in the coordination of the public release. The exploitability is told to be easy. Local access is required to approach this attack. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available. The advisory points out:

SySS GmbH found out that the 125 kHz RFID technology used by the EASY HOME MAS-S01-09 wireless alarm system has no protection by means of authentication against rogue/cloned RFID tokens. The information stored on the used RFID tokens can be read easily in a very short time from distances up to 1 meter, depending on the used RFID reader. A working cloned RFID token is ready for use within a couple of seconds using freely available tools. Thus, an attacker with one-time access to the information of an RFID token of an EASY HOME MAS-S01-09 wireless alarm system is able to create a rogue RFID token that can be used to deactivate the alarm system in an unauthorized manner.

The vulnerability was handled as a non-public zero-day exploit for at least 49 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Monolith

Name

• EASY HOME Alarmanlagen-Set

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion