0
Aleph
Research

Security Research by HCL Software

by HCL Software

VULNS

Dec 21, 2023
CVE-2023-7017
The firmware of the Kontrol Lux lock can be updated w/o AuthZ/AuthC
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Dec 21, 2023
CVE-2023-7009
The Kontrol Lux lock can be forced to process arbitrary unencrypted messages
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Dec 21, 2023
CVE-2023-7007
A Gateway G2 can be impersonated using its MAC address
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Dec 21, 2023
CVE-2023-7004
The TTLock app does not properly verify that it is connected to a real lock
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Dec 21, 2023
CVE-2023-6960
TTLock virtual keys can be reused even after invalidation
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Dec 21, 2023
CVE-2023-7003
Challenge response can be retried indefinitely upon failure
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Dec 21, 2023
CVE-2023-7005
Protocol downgrade on the TTLock app can expose the unlock key
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Dec 21, 2023
CVE-2023-7006
Challenge response can be retried indefinitely upon failure
By aronsky, idan-strovinsky, tomer-telem
Product: Sciener Smart Locks
Mar 12, 2023
CVE-2023-30160
Unauthorized attacker can connect to the MQTT server controlling all of Electra's Smart AC units and gain full control of them
By aronsky, idan-strovinsky
Product: Electra Smart
Mar 12, 2023
CVE-2023-24504
Attacker within WiFi range can cause unconfigured units to connect to a malicious update server
By aronsky, idan-strovinsky
Product: Electra Central AC
Mar 12, 2023
CVE-2023-24503
Attacker within IR range can install arbitrary firmware over the air
By aronsky, idan-strovinsky
Product: Electra Smart Kit for Split AC
Mar 12, 2023
CVE-2023-24502
A WiFi hotspot with a known password is always availiable on unconfigured units
By aronsky, idan-strovinsky
Product: Electra Central AC
Mar 12, 2023
CVE-2023-24501
Credentials for connecting to the MQTT server hardcoded inside the firmware
By aronsky, idan-strovinsky
Product: Electra Central AC
Mar 12, 2023
CVE-2023-24500
Attacker within WiFi range can install arbitrary firmware over the air on unconfigured units
By aronsky, idan-strovinsky
Product: Electra Central AC
Jun 03, 2021
CVE-2021-33813
XXE in JDOM library - Java
By estib
Product: - JDOM library
[ALL VULNERABILITIES]