PT-2019-17792 · Hickory · Hickory Smart For Android

Published 2019-08-22 · Updated 2020-10-16 · CVE-2019-5632

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hickory Smart for Android versions 01.01.43 and prior

Description The issue is related to insecure storage of sensitive information. The application's database contains information that could be used to control lock devices remotely.

Recommendations For versions 01.01.43 and prior, update to a version that addresses the insecure storage of sensitive information to prevent unauthorized remote control of lock devices.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2019-5632

Affected Products

Hickory Smart For Android

References · 4

• https://osv.dev/vulnerability/CVE-2019-5632 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5632 · Security Note
• https://play.google.com/store/apps/details?id=com.belwith.hickorysmart&hl=en_US · Note
• https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities · Note