The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity.
References
Configurations
No configuration.
History
21 Nov 2024, 08:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/ - |
26 Aug 2024, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-940 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
15 Mar 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-15 17:15
Updated : 2024-11-21 08:45
NVD link : CVE-2023-7004
Mitre link : CVE-2023-7004
CVE.ORG link : CVE-2023-7004
JSON object : View
Products Affected
No product.
CWE
CWE-940
Improper Verification of Source of a Communication Channel