CVE-2023-7004

2024-03-1517:15:07

[email protected]

web.nvd.nist.gov

ttlock app

device verification

spoofed mac addresses

lock integrity

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity.

References

alephsecurity.com/2024/03/07/kontrol-lux-lock-2/