CVE-2020-28973

7.5 highEPSS 1.0%

High (7.5) in abus secvest wireless alarm system fuaa50000 firmware. EPSS 1.0% chance of exploitation in the next 30 days.

The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2021-04-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

abus:secvest_wireless_alarm_system_fuaa50000_firmware

References

https://eye.security/en/blog/breaking-abus-secvest-internet-connected-alarm-systems-cve-2020-28973
https://eye.security/en/blog/breaking-abus-secvest-internet-connected-alarm-systems-cve-2020-28973

Check your stack JSON