Ttlock App
Approved changes feed: RSS · Atom
cpe:2.3:a:sciener:ttlock_app:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sciener (0ce94359-0512-578e-a1af-5e1e5a2fda77) |
|---|---|
| Product | Ttlock App (23469e69-8148-53ba-91a1-db6c4deedb8b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7005 |
vulnerable | 2026-06-08 06:21:56.580098 |
CVE-2023-7005
A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field.
Published: 2024-12-19T17:35:45.594Z
Updated: 2025-11-04T18:22:07.890Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7004 |
vulnerable | 2026-06-08 06:21:56.579555 |
CVE-2023-7004
The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity.
Published: 2024-03-15T17:08:11.547Z
Updated: 2025-11-04T18:22:06.692Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7003 |
vulnerable | 2026-06-08 06:21:56.576566 |
CVE-2023-7003
The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.
Published: 2024-03-15T17:09:14.442Z
Updated: 2025-11-04T18:22:05.474Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6960 |
vulnerable | 2026-06-08 06:21:56.474410 |
CVE-2023-6960
TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended deletion.
Published: 2024-03-15T17:09:26.926Z
Updated: 2025-11-04T18:22:04.237Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.