CVE-2025-65553

Katalog CVE

CVSS 6.5 · Medium EPSS 0,18%

Kerentanan Authentication Bypass by Capture-replay pada d3dsecurity xz-g12 firmware. Skor CVSS 3.1 6.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm sensor channel. An attacker within RF range can transmit continuous interference to block sensor transmissions, resulting in missed alarms and loss of security monitoring. The device lacks jamming detection or mitigations, creating a denial-of-service condition that may lead to undetected intrusions or failure to trigger safety alerts.

Rincian

Terbit di NVD

12 Januari 2026

Terakhir diubah

5 Juli 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-294: Authentication Bypass by Capture-replay

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/EmbdCDACHyd/CVE/tree/main/CVE-2025-65553 advisory pihak ketiga
• https://d3dsecurity.com/products/wifi-home-security-system-model-g12 product