Approved changes feed: RSS · Atom

cpe:2.3:a:alps_electric_co.,_ltd.:remote_keyless_entry_system_(rkes)_r53r0:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlps Electric Co., Ltd. (2279b2d0-a29b-5a1e-9748-56c259925857)
ProductRemote Keyless Entry System (Rkes) R53R0 (8bad735b-56d6-5b8b-8c82-5c8e62c5b3b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-49319 vulnerable 2026-07-29 00:57:45.365993 Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack
MEDIUM (6.5)
Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication.  An attacker within RF range who records two consecutive lock or unlock transmissions from a legitimate key fob can later replay the same pair of transmissions repeatedly. During testing, replaying the first captured transmission caused the RKES to enter a state in which replaying the second captured transmission resulted in a successful lock or unlock operation of the vehicle. Tested and confirmed on a 2024 Suzuki Swift (SWIFT ISG GLS AC 1.2 5P 4x2 TM).
Published: 2026-06-25T14:11:18.921Z
Updated: 2026-06-26T05:00:00.212Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.