CVE-2019-9659: Chuango a11 Pstn/lcd/rfid Touch Alarm System Firmware

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.

Affected products

• Chuango a11 Pstn/lcd/rfid Touch Alarm System Firmware: affected versions not specified
• Chuango a8 Pstn Alarm System Firmware: affected versions not specified
• Chuango Awv Plus Wifi Alarm System Firmware: affected versions not specified
• Chuango b11 Dual-Network Alarm System Firmware: affected versions not specified
• Chuango Cg-105s On-Site Alarm System Firmware: affected versions not specified
• Chuango g3 Gsm/sms Alarm System Firmware: affected versions not specified
• Chuango g5 Plus Gsm/sms/rfid Touch Alarm System Firmware: affected versions not specified
• Chuango g5w 3g Firmware: affected versions not specified
• Chuango Wifi/cellular Smart Home System h4 Plus Firmware: affected versions not specified
• Chuango Wifi Alarm System Firmware: affected versions not specified
• Eminent EM8617 OV2 Wifi Alarm System Firmware: affected versions not specified

Published 2019-03-11. Last modified 2026-06-17.