Ash Allen

**Name of the Vulnerable Software and Affected Versions** Suleve 5-in-1 Smart Door Lock version v1.0 **Description** The issue is related to missing encryption in the RFID tag of the Suleve 5-in-1 Smart Door Lock, which allows attackers to create a cloned tag via brief physical proximity to the original device. **Recommendations** For Suleve 5-in-1 Smart Door Lock version v1.0, consider disabling the RFID tag functionality until a patch or fix is available to mitigate the risk of tag cloning. Additionally, restrict physical access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Digoo DG-HAMB Smart Home Security System version 1.0 **Description** The issue is related to missing encryption in the RFID tag of the system, allowing attackers to create a cloned tag via brief physical proximity to the original device. This can be exploited to gain unauthorized access. **Recommendations** For Digoo DG-HAMB Smart Home Security System version 1.0, consider disabling the RFID tag functionality until a patch or fix is available to mitigate the risk of cloned tags being created. Restrict physical access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Etekcity 3-in-1 Smart Door Lock version v1.0 **Description** The issue is related to missing encryption in the RFID tag of the Etekcity 3-in-1 Smart Door Lock, which allows attackers to create a cloned tag via brief physical proximity to the original device. **Recommendations** For Etekcity 3-in-1 Smart Door Lock version v1.0, consider disabling the RFID tag functionality until a patch or fix is available to mitigate the risk of tag cloning.

**Name of the Vulnerable Software and Affected Versions** WAFU Keyless Smart Lock version 1.0 **Description** An issue was discovered that allows attackers to unlock a device via a code replay attack. **Recommendations** For WAFU Keyless Smart Lock version 1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AGShome Smart Alarm version 1.0 **Description** The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. **Recommendations** For AGShome Smart Alarm version 1.0, consider disabling the transmitter until a patch is available to prevent code replay attacks.

**Name of the Vulnerable Software and Affected Versions** Kerui W18 Alarm System version 1.0 **Description** The issue concerns weak security in the 433MHz keyfob of the Kerui W18 Alarm System, allowing attackers to gain full access via a code replay attack. **Recommendations** For Kerui W18 Alarm System version 1.0, consider disabling the 433MHz keyfob functionality until a patch or fix is available to prevent code replay attacks.

**Name of the Vulnerable Software and Affected Versions** Blitzwolf BW-IS22 Smart Home Security Alarm version v1.0 **Description** The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. **Recommendations** For Blitzwolf BW-IS22 Smart Home Security Alarm version v1.0, consider implementing additional security measures to prevent code replay attacks, such as enhancing transmitter security or using encryption, until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Digoo DG-HAMB Smart Home Security System version 1.0 **Description** The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. **Recommendations** For Digoo DG-HAMB Smart Home Security System version 1.0, consider disabling the transmitter until a patch is available to prevent code replay attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do software vulnerável e versões afetadas** Fortessa FTBTLD Smart Lock (versões afetadas não especificadas) **Descrição** O problema está relacionado a permissões incorretas nos serviços Bluetooth da Fortessa FTBTLD Smart Lock, permitindo que um invasor remoto desative a fechadura por meio de uma edição não autenticada do `nome da fechadura`. Isso pode ser feito modificando o nome da fechadura, o que não requer autenticação adequada. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas: Aplicativo eGeeTouch 3rd Generation Travel Padlock para Android (versões afetadas não especificadas) Descrição: Foi detectada uma falha no aplicativo eGeeTouch 3rd Generation Travel Padlock para Android. O cadeado envia um código de emparelhamento antes de cada operação (bloqueio ou desbloqueio) ativada pelo aplicativo complementar. O código é enviado sem criptografia, permitindo que qualquer invasor com o mesmo aplicativo (seja Android ou iOS) adicione o cadeado e assuma o controle total. Para que a exploração seja bem-sucedida, o invasor deve ser capaz de tocar no botão liga/desliga do cadeado e deve ser capaz de capturar a comunicação de rede BLE. Recomendações: No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.