CVE-2022-46307

Summary

SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks.

Affected Software

Weaknesses

• CWE-863: CWE-863 Incorrect Authorization

ADP Enrichment

CVE Program Container

Additional References

• https://www.twcert.org.tw/tw/cp-132-7099-e8897-1.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.twcert.org.tw/tw/cp-132-7099-e8897-1.html

• ←Previous
• Next→