CVE-2023-42470

CRÍTICO 9.8CVE-2023-42470 · Published 11/09/2023 · updated 17/06/2026

En resumen

CVE-2023-42470 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a life (imoulife).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
life imoulife	`≤ 6.8.0`	No fix yet

Description

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

References

actuator/cve · Third Party Advisory
actuator/imou · Exploit
actuator/imou · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free