Описание
Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critical).
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:aqara:home:6.0.0:*:*:*:*:android:*:*
EPSS
Процентиль: 21%
0.00287
Низкий
9.1 Critical
CVSS3
7.4 High
CVSS3
Дефекты
CWE-321
CWE-798
Связанные уязвимости
CVSS3: 9.1
github
около 2 месяцев назад
Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critical).
EPSS
Процентиль: 21%
0.00287
Низкий
9.1 Critical
CVSS3
7.4 High
CVSS3
Дефекты
CWE-321
CWE-798