CVE-2023-31677: High severity luowice vulnerability
Published May 16, 2023
·Updated
Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter.
Affected Software
1 affected component
luowice Luowice Android=3.5.18
Event History
May 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-31677?
CVE-2023-31677 is categorized as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2023-31677?
To fix CVE-2023-31677, update the Luowice application to version 3.5.19 or later which addresses the insecure permissions issue.
3
Which versions of Luowice are affected by CVE-2023-31677?
CVE-2023-31677 affects Luowice version 3.5.18 on Android devices.
4
What does CVE-2023-31677 exploit?
CVE-2023-31677 exploits insecure permissions allowing attackers to view information for other alarm devices.
5
Is user data at risk due to CVE-2023-31677?
Yes, user data may be at risk as attackers could potentially access sensitive information related to other alarm devices.