CVE-2025-30072

Summary

Tiiwee X1 Alarm System TWX1HAKV2 allows Authentication Bypass by Capture-replay, leading to physical Access to the protected facilities without triggering an alarm.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2025/May/20

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://www.tiiwee.com/collections/x1-alarm-systems
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-006.txt

• ←Previous
• Next→