CVE-2023-7004: Sciener Ttlock App

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity.

Affected products

• Sciener Ttlock App: from 6.4.5, up to and including 6.4.5; version 6.4.5 only

Published 2024-03-15. Last modified 2026-06-17.