PT-2019-13043 · Glue · Glue Smart Lock

Publicado 2019-10-15 · Atualizado 2020-08-24 · CVE-2019-12944

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Glue Smart Lock version 2.7.8

Description The issue arises when the network connection is unavailable, and the device fails to properly block guest access in certain situations.

Recommendations For Glue Smart Lock version 2.7.8, consider restricting guest access manually until a patch is available to properly handle network connection unavailability.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2019-12944

Produtos afetados

Glue Smart Lock

Referências · 5

• 🔥 https://kth.se/polopoly_fs/1.931930.1571073241!/Vulnerability_Report_Glue_State_Consistency.pdf · Exploit
• https://kth.se/polopoly_fs/1.914054.1561620889%21/Examensarbete%20Final.pdf · Nota
• https://kth.se/polopoly_fs/1.931930.1571073241%21/Vulnerability_Report_Glue_State_Consistency.pdf · Nota
• https://osv.dev/vulnerability/CVE-2019-12944 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12944 · Nota de Segurança