CyberSecBulletin

Imoulife vulnerabilities

We track 2 vulnerabilities in Imoulife products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2023.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Imoulife vulnerabilities

  • 8.1 High severity

    Imou Life app: Session Fixation

    CVE-2023-6913Imou

    A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new devic

  • 9.8 Critical severity

    Life: Improper Control of Generation of Code

    CVE-2023-42470ImoulifeEPSS 2.49%

    The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the