CVE-2023-6913

HIGH

Imou Life 6.7.0 - Session Hijacking via QR Code WebView Handling

Title source: llm
STIX 2.1

Description

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.

References (1)

Core 1

Scores

CVSS v3 8.1
EPSS 0.0073
EPSS Percentile 49.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Details

CWE
CWE-384
Status published
Products (1)
imoulife/imou_life 6.7.0
Published Dec 19, 2023
Tracked Since Feb 18, 2026