CVE-2023-7005

—

CVSS 3.1

7.5 high

EPSS

<1%p17

Published

Dec 19, 2024 (Dec 19, 2024)

Modified

Jun 17, 2026

Description

A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.