CVE-2023-7017 CVE-2023-7017

2024-03-1517:07:28

certcc

github.com

sciener locks

firmware update

bluetooth low energy

compromise

AI Score

9.5

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Sciener locks’ firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through the Bluetooth Low Energy service. A challenge request can be sent to the lock with a command to prepare for an update, rather than an unlock request, allowing an attacker to compromise the device.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:sciener:kontrol_lux_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "sciener",
    "product": "kontrol_lux_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.x",
        "versionType": "custom",
        "lessThanOrEqual": "6.5.07"
      }
    ],
    "defaultStatus": "unknown"
  }
]