CVE-2019-12943: High severity ttlock vulnerability
Published Sep 10, 2019
·Updated
TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid account names.
Affected Software
1 affected component
TTLock TTLock
Event History
Sep 10, 2019
CVE Published
via MITRE·08:51 PM
Data Sourced
via MITRE·08:51 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-12943?
CVE-2019-12943 has a high severity rating due to its potential for unauthorized access and information disclosure.
2
How do I fix CVE-2019-12943?
To fix CVE-2019-12943, ensure your TTLock device firmware is updated to the latest version provided by the manufacturer.
3
What types of devices are affected by CVE-2019-12943?
CVE-2019-12943 affects TTLock devices that implement the improper password-reset mechanism.
4
What information can be disclosed due to CVE-2019-12943?
CVE-2019-12943 can lead to the disclosure of sensitive information about valid account names on the affected TTLock devices.
5
Is CVE-2019-12943 exploitable remotely?
Yes, CVE-2019-12943 can be exploited remotely by attackers targeting the password-reset functionality.