Approved changes feed: RSS · Atom

cpe:2.3:a:imoulife:imou_life:6.7.0:*:*:*:*:*:*:*

part: a version: 6.7.0 update: *

VendorImoulife (034c05bb-a2a0-5c0c-ab4d-0e5fd5475359)
ProductImou Life (0caf2514-4da1-58fd-acce-5192312ed33b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/user2684/imou_life purl2cpe 2026-06-01 10:14:58.146085

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6913 vulnerable 2026-06-08 06:21:56.291941 Session Hijacking on Imou Life app
HIGH (8.1)
A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.
Published: 2023-12-19T14:49:48.766Z
Updated: 2024-08-02T08:42:08.526Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.