CVE-2025-65552 Details

A vulnerability allowing RF replay attacks has been identified in the D3D Wi-Fi Home Security System ZX-G12, specifically in version 2.1.1. The issue arises from the 433 MHz sensor communication channel, which lacks essential security measures such as rolling codes, message authentication, and anti-replay protection. This absence allows an attacker within RF range to record valid alarm or control signals and replay them, potentially triggering false alarms.

Users are advised to avoid systems that rely on unencrypted RF communications for security. Vendors should implement rolling codes, add cryptographic message authentication, use nonces or timestamps, and adopt secure RF chipsets that comply with modern IoT security standards.