CVE-2023-7005

CVE-2023-7005

High · published December 19, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Published
2024-12-19T17:35Z
EPSS history
Timeline
  • 19 DEC 17:35Z
    CVE-2023-7005
    cvelistv5