« Volver al listado

CVE-2023-6960

Estado: AplazadaAlta (7.5)—

TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended deletion.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Ttlock — Ttlock APPAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-6960",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-6960",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-03-18T14:03:29.310178Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "Sciener",
          "product": "TTLock App",
          "versions": [
            {
              "status": "affected",
              "version": "6.4.5",
              "versionType": "custom",
              "lessThanOrEqual": "6.4.5"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:sciener:ttlock_app:*:*:*:*:*:*:*:*"
          ],
          "vendor": "sciener",
          "product": "ttlock_app",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.4.5"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-03-15T17:15:07.157",
  "references": [
    {
      "url": "https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/",
      "source": "cret@cert.org"
    },
    {
      "url": "https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.kb.cert.org/vuls/id/949046",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "TTLock App virtual keys and settings are only deleted client side, and if preserved, can access the lock after intended deletion."
    },
    {
      "lang": "es",
      "value": "Las claves virtuales y la configuración de la aplicación TTLock solo se eliminan del lado del cliente y, si se conservan, pueden acceder al bloqueo después de la eliminación prevista."
    }
  ],
  "lastModified": "2026-06-17T06:51:46.213",
  "sourceIdentifier": "cret@cert.org"
}