CVE-2023-7017

2024-03-1517:15:07

[email protected]

web.nvd.nist.gov

sciener

firmware update

authentication

bluetooth low energy

compromise

nvd

cve-2023-7017

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Sciener locks’ firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through the Bluetooth Low Energy service. A challenge request can be sent to the lock with a command to prepare for an update, rather than an unlock request, allowing an attacker to compromise the device.

CNA Affected

[
  {
    "vendor": "Sciener",
    "product": "Kontrol Lux",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.x",
        "lessThanOrEqual": "6.5.07",
        "versionType": "custom"
      }
    ]
  }
]

References

alephsecurity.com/2024/03/07/kontrol-lux-lock-2/