About Time Technologies vulnerabilities
We track 3 vulnerabilities in About Time Technologies products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest About Time Technologies vulnerabilities
- 7.8 High severity
Herowatch Go: Use of Default Cryptographic Key
Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can exploit a publicly available test key to sign malicious programs, allowing them to elevate privileges and execute arbitrary code.
- 7.5 High severity
Herowatch Go Server: Authorization Bypass Through User-Controlled Key
Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.
- 8.8 High severity
Herowatch Mini: Missing Authentication for Critical Functionality
Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticated remote attackers can connect to the affected device's ADB service and obtain an ADB shell, thereby accessing device resources or performing related