CVE 6.4 MEDIUM

Micca KE700 Brute-force vulnerability due to low entropy_CVE-2026-2541

6.4 / 10
MEDIUM
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:H/V:D/RE:H

Description

The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolling code. Successful exploitation simplify an attacker to predict the next valid rolling code, granting unauthorized access to the vehicle.

Basic Information

ID CVE-2026-2541
Source ASRG
Published Feb 15, 2026 at 11:07

Affected Product

Vendor Micca Auto Electronics Co., Ltd.
Product Car Alarm System KE700
Version KE700
Affected Versions Micca Auto Electronics Co., Ltd. Car Alarm System KE700 KE700

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.