Skip to content
OpenAdvisories

Product · Sciener

TTLock

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure

    TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key vulnerability that allows an attacker within Bluetooth range to decrypt the per-pairing session key transmitted during BLE pairing. Attackers c…