CVE-2022-32510

Certain Nuki Home Solutions devices are vulnerable due to an HTTP API exposed by a Bridge using an unencrypted channel for its administrative interface. This flaw allows a malicious actor to eavesdrop on a token , enabling them to impersonate a legitimate user and gain unauthorized access to the ...

CVE-2022-32510

An issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge used an unencrypted channel to provide an administrative interface. A token can be easily eavesdropped by a malicious actor to impersonate a legitimate user and gain access to the full set of API...