CVE-2019-5633mediumCWE-922

CVE-2019-5633: medium-severity vulnerability in Belwith Products, LLC Hickory Smart

Hickory Smart Lock Insecure Storage on iOS

Published · Updated

Follow this CVE+ Monitor Hickory Smart

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for iOS, version 01.01.07 and prior versions.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products
Belwith Products, LLC · Hickory Smart
Related CVEs — Belwith Products, LLC Hickory Smart

In the same product, most dangerous first.

CVE-2019-5634MEDIUMHickory Smart Lock Insecure Logging on AndroidEPSS 0.4%CVE-2019-5632MEDIUMHickory Smart Lock Insecure Storage on AndroidEPSS 0.4%