PT-2019-17793 · Hickory · Hickory Smart

Published 2019-08-22 · Updated 2020-10-16 · CVE-2019-5633

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hickory Smart for iOS versions 01.01.07 and prior

Description The issue is related to insecure storage of sensitive information. The application's database contains information that could be used to control lock devices remotely.

Recommendations For versions 01.01.07 and prior, update to a version later than 01.01.07 to resolve the issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2019-5633

Affected Products

Hickory Smart

References · 4

• https://osv.dev/vulnerability/CVE-2019-5633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5633 · Security Note
• https://apps.apple.com/us/app/hickory-smart/id1189748191 · Note
• https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities · Note