CVE-2023-33740

Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo the Verify parameter in a warning message...

CVE-2023-33740

Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo the Verify parameter in a warning message...

CVE-2023-31677

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter...

PT-2023-23414 · Luowice · Luowice

Name of the Vulnerable Software and Affected Versions: luowice version 3.5.18 Description: The issue allows attackers to view information for other alarm devices by modifying the eseeid parameter, due to insecure permissions. Recommendations: For luowice version 3.5.18, restrict access to the...