Vendor
akia
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.4
Broken authorization in Akia keyless entry lets an authenticated guest unlock other rooms
Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest's…