CVE-2023-7009

Summary

Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be further exploited by an attacker to compromise the lock's integrity.

Affected Software

Weaknesses

• CWE-311 Missing Encryption of Sensitive Data
• CWE-319 Cleartext Transmission of Sensitive Information

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/
• https://www.kb.cert.org/vuls/id/949046

References

• https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/

• ←Previous
• Next→