Is CVE-2025-65552 actively exploited?

No active exploitation of CVE-2025-65552 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-65552 be exploited remotely?

Yes. CVE-2025-65552 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-65552?

CVE-2025-65552 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2025-65552

CRITICAL

CVE-2025-65552

CWE-294Published: January 12, 2026· Updated: Jul 5, 2026

9.8

CVSS v3.1

Official Description

D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication channel. The system does not implement rolling codes, message authentication, or anti-replay protection, allowing an attacker within RF range to record valid alarm/control frames and replay them to trigger false alarms.

NVD Source

Risk Analysis

This critical vulnerability in the D3D Wi-Fi Home Security System ZX-G12 allows for RF replay attacks. The system lacks rolling codes, message authentication, and anti-replay protection, enabling attackers to trigger false alarms. With a CVSS score of 9.8, this flaw poses a significant risk to the integrity and reliability of the security system.

No public exploit is currently known for this vulnerability. An attacker within RF range can remotely exploit this with low complexity.

Recommended Action

Administrators should upgrade the D3D Wi-Fi Home Security System ZX-G12 firmware to a version that implements proper RF security measures. Consider supplementing with additional security layers that are not susceptible to RF replay attacks.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2025-65552 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.