Tinxy WiFi Lock Controller Unsecured Transmission of Sensitive Information

A vulnerability exists in the Tinxy WiFi Lock Controller version 1 RF, where sensitive information, including control data and device credentials, is transmitted in plaintext. This lack of encryption exposes the data to potential interception by attackers, allowing for unauthorized access to sensitive information through a man-in-the-middle attack.

Impact

Exploitation of this vulnerability could lead to interception of unencrypted data, including control commands and sensitive credentials, which could be used to manipulate the device or gain unauthorized access to networks or services.