Safety notice regarding the Secvest Wi-Fi® module FUMO50040

Vulnerabilities have been identified in the Wi-Fi® module mentioned above. The module was marketed by ABUS as an optional add-on for the Secvest wireless alarm system between 2017 and 2020.

The vulnerabilities affect only the Wi-Fi® module. They do not allow access to the Secvest control panel, nor do they affect the system’s alarm functionality. Only the local network connection could be interrupted (e.g. operation via the app would no longer be possible).

Customers using the Secvest alarm system without the Wi-Fi® module are not affected by this notice. 

In order to exploit these vulnerabilities, an attacker must first gain access to the user’s local network.  

The following security measures should be taken:

Secure passwords
As access to the Wi-Fi® module is only possible if the attacker has first gained access to the user’s local network, affected customers should check their Wi-Fi password (network key) and change it if necessary. The Wi-Fi password should meet a high security standard. The same applies to the password used to configure the Wi-Fi® module. Valuable guidance on creating secure passwords is provided, for example, by the BSI (Federal Office for Information Security) at the following link: BSI – Creating secure passwords (bund.de).

Up-to-date router firmware 
You should ensure that the Wi-Fi router’s firmware is updated to the latest version and that the firewall function in the router is enabled.

Please note:
To date, no incidents have been reported amongst ABUS customers. This notice is intended as a precautionary measure and to keep our customers informed.
 
The FUMO50040 Wi-Fi® module has not been available for sale from ABUS since 2020.

 

^{Copyright notice: Wi-Fi® is a registered trade mark of the Wi-Fi® Alliance}