CVE-2022-32505

CVSS 7.1 HIGHEPSS 0.5%CWE-400

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 may 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Productos afectados

n/a · n/a

Referencias

https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/https://nuki.io/en/security-updates/https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/