CVE-2019-5632 MEDIUM

CVE-2019-5632: Hickory Smart Lock Insecure Storage on Android

Vendor Belwith Products, Llc
Product Hickory Smart
Weakness CWE-922
Published August 22, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

An insecure storage of sensitive information vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for Android, version 01.01.43 and prior versions.

Key dates

02Disclosure timeline

August 22, 2019 CVE published
September 16, 2024 Record updated