Code injection

An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...

PT-2023-24920 · Wafu · Wafu Keyless Smart Lock

Name of the Vulnerable Software and Affected Versions: WAFU Keyless Smart Lock version 1.0 Description: An issue was discovered that allows attackers to unlock a device via a code replay attack. Recommendations: For WAFU Keyless Smart Lock version 1.0, at the moment, there is no information about...

CVE-2023-34553

The CVE-2023-34553 entry concerns WAFU Keyless Smart Lock v1.0, where a vulnerability allows unlocking the device via a code replay attack. The issue affects the Keyless Smart Lock software component; underlying cause details are not explicitly provided beyond the replay mechanism described in mu...

CVE-2023-34553: Authentication Bypass by Capture-replay

An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...

WAFU Keyless Smart Lock 安全漏洞

WAFU Keyless Smart Lock is a series of smart locks from the Chinese company WAFU. A security vulnerability exists in WAFU Keyless Smart Lock v1.0, which stems from a vulnerability that allows an attacker to unlock a device via a code replay attack...

CVE-2023-34553

An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack...

Qrio Smart Lock Q-SL2 vulnerable to authentication bypass by capture-replay

Overview Qrio Smart Lock Q-SL2 provided by Qrio, inc. contains an authentication bypass by capture-replay vulnerability CWE-294. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

JVN#48687031: Qrio Smart Lock Q-SL2 vulnerable to authentication bypass by capture-replay

Qrio Smart Lock Q-SL2 provided by Qrio, inc. contains an authentication bypass by capture-replay vulnerability CWE-294. Impact An attacker may analyze the product's communication data and perform unintended operations under certain conditions. Solution Update the firmware and related products...

MCK Smartlock 加密问题漏洞

MCK Smartlock is a smart combination lock. A security vulnerability exists in MCK Smartlock version 1.0, which stems from the use of an insecure rolling code algorithm. An attacker exploited the vulnerability to unlock the mechanism...

CVE-2021-44905

Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name...

CVE-2021-44905

Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name...

Code injection

Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name...

CVE-2021-44905

Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name...

Fortessa FTBTLD Smart Lock 安全漏洞

Fortessa FTBTLD Smart Lock is a smart lock. A security vulnerability exists in the Fortessa FTBTLD Smart Lock that allows a remote attacker to disable the lock by making unauthenticated edits to the lock name...

CVE-2021-44905: Incorrect Default Permissions

Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name...

PT-2022-12259

Name of the Vulnerable Software and Affected Versions Fortessa FTBTLD Smart Lock affected versions not specified Description The issue is related to incorrect permissions in the Bluetooth Services of the Fortessa FTBTLD Smart Lock, allowing a remote attacker to disable the lock via an...

Google to auto-enrol users, YouTubers into 2SV

Googles announced some changes to how its helping millions of its users stay safe and secure. The biggest of those changes is that it plans to auto-enrol its users in to two-step verification, or 2SV. 2SV adds an extra layer when logging into your account and the additional step happens after you...

360lock Smart Lock Review

Two years ago I helped kick start a smart lock, the 360lock. It finally arrived this week. It has different modules like a keybox below and a bike chain. I originally live tweeted the hack on Tuesday Sep 8, 2020. So, how good is it? Blockchain integration! According to the website the 360lock has...

Smart Lock vulnerability can give hackers full access to Wi-Fi network

By Zara Khan The vulnerability exists in the August smart lock Pro + Connect model which hasn't been fixed. This is a post from HackRead.com Read the original post: Smart Lock vulnerability can give hackers full access to Wi-Fi network...

CVE-2019-17518

The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to link layer packets with a payload length larger than expected, allowing attackers in radio range to cause a buffer overflow via a crafted packet. This affects, for example, Augu...