CVE-2023-7007

2024-03-1517:15:07

[email protected]

web.nvd.nist.gov

sciener server

unvalidated connection

impersonation attack

unlockkey field

gatewayg2

AI Score

6.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Sciener server does not validate connection requests from the GatewayG2, allowing an impersonation attack that provides the attacker the unlockKey field.

References

alephsecurity.com/2024/03/07/kontrol-lux-lock-2/