CVE-2019-5633 - CVE House
Back to Database
Status published Medium CVE-2019-5633

Hickory Smart Lock Insecure Storage on iOS

Vulnerability Description

An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for iOS, version 01.01.07 and prior versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-5633

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • This issue was discovered and reported by Deral Heiland of Rapid7. It has been disclosed in accordance with Rapid7's vulnerability disclosure policy (https://www.rapid7.com/disclosure/).

References

More from Belwith Products, LLC

View All →
CVE-2019-5635
Hickory Smart Lock Cleartext Password
Medium 6.5
CVE-2019-5634
Hickory Smart Lock Insecure Logging on Android
Medium 6.5
CVE-2019-5632
Hickory Smart Lock Insecure Storage on Android
Medium 6.5

Affected Vendor

Belwith Products, LLC

View all reports →

Affected Software

Hickory Smart
Vulnerable Versions:
unspecified

Timeline

Official Publish: August 22nd, 2019
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-922

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.