Authentication flaw

2023-05-2302:15:00

PRIOn knowledge base

www.prio-n.com

authentication flaw

network-adjacent

communication data

arbitrary operation

qrio lock

nvd

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

JSON

Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent attacker to analyze the product’s communication data and conduct an arbitrary operation under certain conditions.

CPENameOperatorVersion
q-sl2_firmwarele2.0.9

CPE	Name	Operator	Version
	q-sl2_firmware	le	2.0.9

References

jvn.jp/en/jp/JVN48687031/

qrio.me/article/announce/2023/4140/