CVE-2023-31677: Luowice

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter.

Affected products

• Luowice Luowice: version 3.5.18 only

Published 2023-05-16. Last modified 2026-06-17.