com.lumiunited.aqarahome vulnerabilities
1 known vulnerability in com.lumiunited.aqarahome from Aqara. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest first
- 7.4 High severity
com.lumiunited.aqarahome: Use of Hard-coded Credentials
Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of CVSS:3.1/A