CVE-2023-6960: High severity TTLock TTLock App vulnerability
Published Mar 15, 2024
·Updated
TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended deletion.
Affected Software
1 affected component
TTLock TTLock App
Event History
Mar 15, 2024
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-6960?
CVE-2023-6960 has been classified as a medium severity vulnerability due to potential unauthorized access to locks.
2
How do I fix CVE-2023-6960?
To mitigate CVE-2023-6960, ensure that virtual keys are properly deleted from the TTLock App and reset the lock if needed.
3
What impact does CVE-2023-6960 have on users?
CVE-2023-6960 allows an attacker to regain access to a lock even after the user believes they have deleted the virtual key.
4
Which devices are affected by CVE-2023-6960?
CVE-2023-6960 affects users of the TTLock App who manage virtual keys for locks supported by the application.
5
Is CVE-2023-6960 a client-side or server-side issue?
CVE-2023-6960 is primarily a client-side issue as the virtual keys and settings are only deleted from the user's device.