MEDIUM
Alps Electric Co., Ltd.
CVE published 2026-06-25
CVE-2026-49319
A remote keyless entry system (RKES) using a 433 MHz key fob bearing FCC ID CWTR53R0, manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack. An attacker within RF range can record two consecutive lock or unlock transmissions from a legitimate key fob and replay them to gain unauthorized access. This vulnerability was tested and confirmed on a 2024 Suzuki Swift (SWIFT ISG GLS AC 1.2 5P [truncated]