CVE-2023-6960 CVE-2023-6960

2024-03-1517:09:26

certcc

github.com

ttlock

app

security

vulnerability

deletion

access

lock

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended deletion.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:sciener:ttlock_app:*:*:*:*:*:*:*:*"
    ],
    "vendor": "sciener",
    "product": "ttlock_app",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "6.4.5"
      }
    ],
    "defaultStatus": "unknown"
  }
]