CVE-2025-65552 identifies a critical vulnerability in the D3D Wi-Fi Home Security System ZX-G12 v2.1.1 where the 433 MHz sensor communication channel is susceptible to RF replay attacks. The absence of rolling codes, message authentication, and anti-replay mechanisms allows an attacker to record legitimate alarm or control frames and replay them to the system, causing unauthorized triggering of alarms. This vulnerability corresponds to CWE-294 (Improper Authentication). No patch or remediation information is provided, and no known exploits are reported in the wild.

An attacker within RF range can exploit this vulnerability to replay previously captured valid signals, causing false alarms or unauthorized control of the security system. This compromises the integrity and availability of the alarm system, potentially leading to denial of service or distraction from real security events.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider physical security measures to limit attacker proximity and monitor for suspicious alarm activity. No official fix or workaround is currently documented.