Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-36228
HistoryOct 09, 2023 - 9:15 p.m.

CVE-2022-36228

2023-10-0921:15:09
CWE-862
[email protected]
web.nvd.nist.gov
2
nokelock
smart padlock
insecure permissions
vulnerability
device password
nokelock app

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

15.5%

JSON

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app.

Affected configurations

Nvd
Node
janusintlnoke_standard_smart_padlockMatch-
AND
janusintlnoke_standard_smart_padlock_firmwareMatch5.3.0
Node
janusintlnoke_hd_smart_padlockMatch-
AND
janusintlnoke_hd_smart_padlock_firmwareMatch5.3.0
Node
janusintlnoke_hd\+_smart_padlockMatch-
AND
janusintlnoke_hd\+_smart_padlock_firmwareMatch5.3.0
VendorProductVersionCPE
janusintlnoke_standard_smart_padlock-cpe:2.3:h:janusintl:noke_standard_smart_padlock:-:*:*:*:*:*:*:*
janusintlnoke_standard_smart_padlock_firmware5.3.0cpe:2.3:o:janusintl:noke_standard_smart_padlock_firmware:5.3.0:*:*:*:*:*:*:*
janusintlnoke_hd_smart_padlock-cpe:2.3:h:janusintl:noke_hd_smart_padlock:-:*:*:*:*:*:*:*
janusintlnoke_hd_smart_padlock_firmware5.3.0cpe:2.3:o:janusintl:noke_hd_smart_padlock_firmware:5.3.0:*:*:*:*:*:*:*
janusintlnoke_hd\+_smart_padlock-cpe:2.3:h:janusintl:noke_hd\+_smart_padlock:-:*:*:*:*:*:*:*
janusintlnoke_hd\+_smart_padlock_firmware5.3.0cpe:2.3:o:janusintl:noke_hd\+_smart_padlock_firmware:5.3.0:*:*:*:*:*:*:*

Related

prion 1
cvelist 1
cve 1
prion
prion
Default credentials
2023-10-09 21:15:00
cvelist
cvelist
CVE-2022-36228
2023-10-09 00:00:00
cve
cve
CVE-2022-36228
2023-10-09 21:15:09

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

15.5%

JSON
Related for NVD:CVE-2022-36228
prion1cvelist1cve1