CVE-2023-50124

2024-01-1100:00:00

mitre

github.com

flient smart door lock

default credentials

vulnerability

fingerprint scanner

AI Score

6.8

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:flient:smart_lock_advanced_firmware:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "flient",
    "product": "smart_lock_advanced_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]