Security Advisory
CVE-2023-42470
9.8
CRITICAL
Vulnerability Description
The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.
Published Date
September 11, 2023
Official Source
NIST NVD Advisory