CVE-2019-17627

Summary: CVE-2019-17627 affects the Yale Bluetooth Key mobile app and Yale ZEN-R lock family. The issue lets an attacker sniff BLE traffic during an authorized unlock and then compute the authentication key from the hex digits of a valid authentication request, enabling unauthorized unlock action...