CVE-2026-2541 — Micca KE700 Brute-force vulnerability due to low entropy

CVE-2026-2541

Micca KE700 Brute-force vulnerability due to low entropy PUBLISHED

Description (CNA)

The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolling code. Successful exploitation simplify an attacker to predict the next valid rolling code, granting unauthorized access to the vehicle.

Affected (CNA)

Vendor / product	Versions
Micca Auto Electronics Co., Ltd. / Car Alarm System KE700	affected KE700; unknown KE700+

CWE

CWE-331

References

https://asrg.io/security-advisories/cve-2026-2541/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.