The vulnerability lies in the rolling‐code authentication of Alps Electric’s 433 MHz key fob (CWTR53R0). An attacker who captures two consecutive lock or unlock transmissions can replay the first to bring the system into a vulnerable state, then replay the second to force the vehicle to lock or unlock. The flaw allows a legitimate user’s credentials to be reused without detection, effectively bypassing the intended authentication protocol and granting an adversary physical access to the vehicle.

The flaw affects the Remote Keyless Entry System (RKES) R53R0 manufactured by Alps Electric Co., Ltd. No specific firmware or hardware revision is listed, but the vulnerability was demonstrated on a 2024 Suzuki Swift equipped with this key fob. Vehicles that use this RKES product and the CWTR53R0 key fob are therefore susceptible.

The CVSS score is 6.9, indicating a high level of risk. Exploitation requires that the attacker be within radio‑frequency range of the vehicle to record and replay the transmissions, and the attack has not yet been reported in the CISA KEV catalog. Because the EPSS score is not available, the exact probability of exploitation is unknown, but the attack is technically straightforward and has a limited effectiveness window. The impact is significant because a replay that succeeds can lock or unlock the vehicle, enabling physical access or denial of access.