Логотип exploitDog
bind:CVE-2023-42470
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-42470

Количество 2

Количество 2

nvd логотип

CVE-2023-42470

больше 2 лет назад

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

CVSS3: 9.8
EPSS: Средний
github логотип

GHSA-c5rx-58cv-6366

больше 2 лет назад

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

CVSS3: 9.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-42470

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

CVSS3: 9.8
13%
Средний
больше 2 лет назад
github логотип
GHSA-c5rx-58cv-6366

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

CVSS3: 9.8
13%
Средний
больше 2 лет назад

Уязвимостей на страницу