CVE-2021-44518

Katalog CVE

CVSS 6.8 · Medium EPSS 0,31%

Kerentanan Cleartext Transmission of Sensitive Information pada digipas egeetouch manager. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the eGeeTouch 3rd Generation Travel Padlock application for Android. The lock sends a pairing code before each operation (lock or unlock) activated via the companion app. The code is sent unencrypted, allowing any attacker with the same app (either Android or iOS) to add the lock and take complete control. For successful exploitation, the attacker must be able to touch the lock's power button, and must be able to capture BLE network communication.

Rincian

Terbit di NVD

2 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.8 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-319: Cleartext Transmission of Sensitive Information

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ashallen.net/the-egeetouch-tsa-smart-lock-is-anything-but exploit · advisory pihak ketiga