CVE-2023-50123

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-01-11 · updated 2026-06-17
Weakness: CWE-307

Description

The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This could allow an attacker to perform a brute force on the SMS authentication, to bring the alarm system to a disarmed state.

Affected products

Hozard Alarm System: 1.0

References

https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices
https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices

Get alerted when CVE-2023-50123 or the next vulnerability affects your stack