CVE-2025-65553 Details
Description
D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm sensor channel. An attacker within RF range can transmit continuous interference to block sensor transmissions, resulting in missed alarms and loss of security monitoring. The device lacks jamming detection or mitigations, creating a denial-of-service condition that may lead to undetected intrusions or failure to trigger safety alerts.
A denial-of-service vulnerability has been identified in the D3D Wi-Fi Home Security System model ZX-G12, running firmware version 2.1.17. The issue arises from the system's reliance on a fixed-frequency 433 MHz channel for communication between sensors and the central hub. An attacker within RF range can transmit continuous interference on this channel, effectively blocking sensor alerts from reaching the central unit. This disruption prevents alarms from sounding and notifications from being sent to the associated mobile app, creating a silent security breach. The system lacks any jamming detection or mitigation measures, leaving users unaware of potential intrusions.
No specific remediation is available, but the vendor has been notified of the vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://d3dsecurity.com/products/wifi-home-security-system-model-g12 | CISA-ADP | Product |
| https://github.com/EmbdCDACHyd/CVE/tree/main/CVE-2025-65553 | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-294 | Authentication Bypass by Capture-replay | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| d3dsecurity xz-g12 firmware | 2.1.17 |
CPE
Remediation
| |
| d3dsecurity xz-g12 | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 5, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 22, 2026 | Initial Analysis | [email protected] |
| Jan 13, 2026 | CVE Modified | CISA-ADP |
| Jan 12, 2026 | New CVE Received | [email protected] |