CVE-2019-5633
Hickory Smart Lock Insecure Storage on iOS
- State
- Published
- Severity
- 6.5 Medium
- Published
- Aug 22, 2019
- Updated
- Sep 16, 2024
- Reserved
- Jan 7, 2019
Description
An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for iOS, version 01.01.07 and prior versions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.5 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N | rapid7 |
Weaknesses
- CWE-922 Insecure Storage of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
Hickory SmartBelwith Products, LLC |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.