actuator/imou

actuator/imou

Releases0

Stars4

CVE-2023-42470 | CVE-2023-47353

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-47353 ↗	Feb 6, 2024Tuesday, 6 February 2024, 01:15	8.8 HIGH	—
An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitrary files.
CVE-2023-42470 ↗	Sep 11, 2023Monday, 11 September 2023, 08:15	9.8 CRITICAL	—
The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.