Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-27qj-3j3m-fj5v

Опубликовано: 12 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critical).

Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critical).

EPSS

Процентиль: 21%
0.00287
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-321

Связанные уязвимости

CVSS3: 9.1
nvd
около 2 месяцев назад

Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critical).

EPSS

Процентиль: 21%
0.00287
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-321