Vulnerabilities

TI-2023-25619 CVE-2023-47353 · GHSA-c5g4-g3x7-x8rm

An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO…

HIGH 73

An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitrary files.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00292 Published 2024-02-06 No fix listed CWE-494

TI-2023-06318 CVE-2023-6913 · GHSA-2gwm-8mq4-p9j4

Session Hijacking on Imou Life app

LOW 36

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00729 Published 2023-12-19 No fix listed CWE-384

TI-2023-22634 CVE-2023-42470 · GHSA-c5rx-58cv-6366

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows…

HIGH 82

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02488 Published 2023-09-11 No fix listed CWE-94

Vulnerabilities

Filters

An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO…

Session Hijacking on Imou Life app

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows…