Skip to content
OpenAdvisories

Vendor

Sciener

9 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.8

    CVE-2023-7003

    The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.

  • Medium 6.5

    CVE-2023-7004

    The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity.