Vulnerability record · CVE-2025-65552 · published 12 January 2026
CVE-2025-65552: D3dsecurity zx-g12 firmware authentication bypass by capture-replay vulnerability
D3dsecurity · Zx G12 Firmware
D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication channel. The system does not implement rolling codes, message authentication, or anti-replay protection, allowing an attacker within RF range to record valid alarm/control frames and replay them to trigger false alarms.
Description
D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication channel. The system does not implement rolling codes, message authentication, or anti-replay protection, allowing an attacker within RF range to record valid alarm/control frames and replay them to trigger false alarms.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://github.com/EmbdCDACHyd/CVE/tree/main/CVE-2025-65552 | Third Party Advisory |
| https://d3dsecurity.com/products/wifi-home-security-system-model-g12 | Product |
| https://github.com/EmbdCDACHyd/CVE/tree/main/CVE-2025-65552 | Third Party Advisory |
Track CVE-2025-65552 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2025-65552), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
