CVE-2023-7005: Sciener Ttlock App

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field.

Affected products

• Sciener Ttlock App: from 6.4.5, up to and including 6.4.5

Published 2024-12-19. Last modified 2026-06-17.