CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials

Medium · published January 11, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Published
2024-01-11T00:00Z
EPSS history
Timeline
  • 11 JAN 00:00Z
    Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials
    cvelistv5