CVE Catalog

CVE-2023-39841

MediumCVSS 4.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.

Risk Assessment

Attackers can easily clone the tag, leading to unauthorized access to the lock, posing a serious security threat.

Recommendation

It is recommended to update the device firmware and implement additional security measures to prevent tag cloning.

Original NVD description (English source)

Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS