Crime: BSI warns against the use of insecure wireless door locks

crime
BSI warns against the use of insecure wireless door locks

The Federal Office for Information Security in Bonn. photo

©Oliver Berg/dpa

A discontinued model: Beware of using the digital door lock HomeTec Pro CFA3000 from the manufacturer Abus. The manufacturer himself has confirmed the vulnerability to the Federal Office for Information Security.

The Federal Office for Information Security (BSI) has warned against the use of the digital door lock HomeTec Pro CFA3000 from the manufacturer Abus. The agency recommended replacing the product.

A weak point in the radio door lock drive allows attackers to unlock the radio lock and thus gain unauthorized access to buildings, offices or apartments.

The BSI emphasized that Abus had confirmed the vulnerability to the BSI and informed that the product examined was a phased-out model that had been replaced by a successor model since March 2021. The secure successor model can be recognized, among other things, by an enclosed key card with a unique QR code in each case; in addition, the product and packaging of the new version are printed with the Bluetooth logo. Initially, no statement could be obtained from Abus himself.

BSI President Arne Schönbohm said: “We expect that companies will not leave their customers alone with a problem of this magnitude and recommend examining the use of alternative products.”

Digital door locks are being used more and more frequently to protect rooms and entrance doors. For locking and unlocking, different techniques for transmitting locking and opening signals, such as radio, are used.

BSI warning

dpa

source site-5