PT-2019-13043 · Glue · Glue Smart Lock

Published 2019-10-15 · Updated 2020-08-24 · CVE-2019-12944

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Glue Smart Lock version 2.7.8

Description The issue arises when the network connection is unavailable, and the device fails to properly block guest access in certain situations.

Recommendations For Glue Smart Lock version 2.7.8, consider restricting guest access manually until a patch is available to properly handle network connection unavailability.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2019-12944

Affected Products

Glue Smart Lock

References · 5

• 🔥 https://kth.se/polopoly_fs/1.931930.1571073241!/Vulnerability_Report_Glue_State_Consistency.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2019-12944 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12944 · Security Note
• https://kth.se/polopoly_fs/1.914054.1561620889%21/Examensarbete%20Final.pdf · Note
• https://kth.se/polopoly_fs/1.931930.1571073241%21/Vulnerability_Report_Glue_State_Consistency.pdf · Note