CVE-2023-7017

Summary

Sciener locks' firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through the Bluetooth Low Energy service. A challenge request can be sent to the lock with a command to prepare for an update, rather than an unlock request, allowing an attacker to compromise the device.

Affected Software

Weaknesses

• CWE-494 Download of Code Without Integrity Check

ADP Enrichment

CVE Program Container

Additional References

• https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/
• https://www.kb.cert.org/vuls/id/949046

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/

• ←Previous
• Next→