Executive Summary

The vulnerability affects the Remote Keyless Entry System (RKES) that uses a 433 MHz key fob with FCC ID CWTR53R0, manufactured by ALPS ALPINE CO., LTD. It is susceptible to a roll-back attack on its rolling-code authentication.

An attacker within radio frequency (RF) range can record two consecutive lock or unlock transmissions from a legitimate key fob. The attacker can then replay these transmissions repeatedly to the vehicle.

During testing on a 2024 Suzuki Swift, replaying the first captured transmission caused the system to enter a state where replaying the second transmission successfully locked or unlocked the vehicle.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker within RF range to gain unauthorized access to a vehicle by replaying recorded lock or unlock signals.

As a result, the attacker can lock or unlock the vehicle without the owner's consent, potentially leading to theft or unauthorized use of the vehicle.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves replaying recorded RF transmissions from a Remote Keyless Entry System (RKES) key fob operating at 433 MHz. Detection would require capturing and analyzing RF signals within the 433 MHz band to identify repeated or suspicious replayed transmissions.

Specific commands or tools to detect this vulnerability are not provided in the available information.

Useful 0 Not Useful 0

Mitigation Strategies

The provided information does not include explicit mitigation steps for this vulnerability.

General best practices for mitigating roll-back or replay attacks on rolling-code systems include updating the firmware of the keyless entry system if a patch is available, increasing the rolling code complexity, or using additional authentication factors.

Useful 0 Not Useful 0