Product
TTLock Android applications before v9.8.260718 and associated smart-lock firmware utilize a hardcoded static AES key, allowing an attacker within Bluetooth range to intercept session keys and forge administrative commands.