Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Kankun Smart Socket device and mobile application uses a hardcoded AES 256 bit key, which makes it easier for remote attackers to (1) obtain sensitive information by sniffing the network and (2) obtain access to the device by encrypting messages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kankun Smart Socket设备和移动应用程序加密问题漏洞
Vulnerability Description
Kankun Smart Socket device是中国控客公司的一款无线智能插座。mobile application是无线智能插座的移动应用程序。 Kankun Smart Socket设备和移动应用程序中存在安全漏洞，该漏洞源于程序使用硬编码的AES 256位密钥。远程攻击者可通过嗅探网络利用该漏洞获取敏感信息；通过加密消息利用该漏洞获取设备的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A