CVE-2023-34625
CVSS 3.1 Score 8.1 of 10 (high)
Details
Summary
CVE-2023-34625 is a newly disclosed vulnerability affecting the ShowMojo MojoBox Digital Lockbox version 1.4. The issue lies in the lock opening mechanism implemented via Bluetooth Low Energy (BLE), which is susceptible to replay attacks. A malicious user can intercept and replicate BLE requests to open the lock at any time. Additionally, an attacker with access to the Android app on a targeted device can obtain the latest BLE messages from app logs and utilize them to open the lock. This vulnerability poses a significant risk as it enables unauthorized access to secured digital lockboxes.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.