PT-2019-17792 · Hickory · Hickory Smart For Android

Publicado 2019-08-22 · Atualizado 2020-10-16 · CVE-2019-5632

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hickory Smart for Android versions 01.01.43 and prior

Description The issue is related to insecure storage of sensitive information. The application's database contains information that could be used to control lock devices remotely.

Recommendations For versions 01.01.43 and prior, update to a version that addresses the insecure storage of sensitive information to prevent unauthorized remote control of lock devices.

Correção

Insecure Storage of Sensitive Information

Enumeração de Fraquezas

CWE-922

Identificadores relacionados

CVE-2019-5632

Produtos afetados

Hickory Smart For Android

Referências · 4

• https://play.google.com/store/apps/details?id=com.belwith.hickorysmart&hl=en_US · Nota
• https://osv.dev/vulnerability/CVE-2019-5632 · Aviso do Fabricante
• https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-5632 · Nota de Segurança