CVE-2023-7004

—

CVSS 3.1

6.5 medium

EPSS

<1%p6

Published

Mar 15, 2024 (Mar 15, 2024)

Modified

Jun 17, 2026

Description

The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity.

Weakness: CWE-940
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.