CVE-2019-5633CWE-922

Hickory Smart Lock Insecure Storage on iOS

Medium · published August 22, 2019

CVSS v3.0
6.5
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for iOS, version 01.01.07 and prior versions.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.6th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2019-08-22T13:51Z
EPSS history
Timeline
  • 22 AUG 13:51Z
    Hickory Smart Lock Insecure Storage on iOS
    cvelistv5