What’s Vulnerable › Vulnerabilities

CVE-2019-9659

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-11 · updated 2026-06-17
• Weakness: CWE-294

Description

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.

Affected products

• Chuango A11 Pstn/Lcd/Rfid Touch Alarm System Firmware: all versions
• Chuango A8 Pstn Alarm System Firmware: all versions
• Chuango Awv Plus Wifi Alarm System Firmware: all versions
• Chuango B11 Dual-Network Alarm System Firmware: all versions
• Chuango Cg-105S On-Site Alarm System Firmware: all versions
• Chuango G3 Gsm/Sms Alarm System Firmware: all versions
• Chuango G5 Plus Gsm/Sms/Rfid Touch Alarm System Firmware: all versions
• Chuango G5W 3G Firmware: all versions
• Chuango Wifi/Cellular Smart Home System H4 Plus Firmware: all versions
• Chuango Wifi Alarm System Firmware: all versions
• Eminent Em8617 Ov2 Wifi Alarm System Firmware: all versions

References

• https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659
• https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659

Get alerted when CVE-2019-9659 or the next vulnerability affects your stack