Medium severity5.9NVD Advisory· Published Jun 23, 2020· Updated Jun 17, 2026

CVE-2020-9438

Description

Tinxy Door Lock with firmware before 3.2 allow attackers to unlock a door by replaying an Unlock request that occurred when the attacker was previously authorized. In other words, door-access revocation is mishandled.

Affected products

Tinxy/Smart Wifi Door Lock Firmware
cpe:2.3:o:tinxy:smart_wifi_door_lock_firmware:*:*:*:*:*:*:*:*
Range: <3.2
Tinxy/Door Lockdescription
Tinxy/Tinxyllm-fuzzy
Range: <3.2

Patches

Vulnerability mechanics

References

medium.com/%40avishek_75733/smart-products-are-always-not-that-smart-tinxy-smart-door-lock-vulnerability-97f91e435e06nvd

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000