PatchTheCVEone-key vulnerabilities and fixes
Recent CVEs affecting one-key, with upgrade or downgrade steps. 2 tracked.
Also searched as: one key.
one-key has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-06-20. Highest priority: CVE-2017-3214 (score 44/100).
- CVE-2017-3215 MEDIUM 5.3 MITIGATE The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year
- CVE-2017-3214 HIGH 7.5 MITIGATE The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.
FAQ
How do I fix one-key vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is one-key being exploited right now?
None of the tracked one-key CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which one-key CVE should I patch first?
CVE-2017-3214 currently ranks highest (44/100): The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary..