CVE-2022-32510

An issue was discovered on certain Nuki Home Solutions devices where the HTTP API exposed by a Bridge used an unencrypted channel to provide an administrative interface. A malicious actor could eavesdrop on the communication to intercept a token , allowing them to impersonate a legitimate user an...

CVE-2022-32510

An issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge used an unencrypted channel to provide an administrative interface. A token can be easily eavesdropped by a malicious actor to impersonate a legitimate user and gain access to the full set of API...