CVE-2022-32507

An issue was discovered on certain Nuki Home Solutions devices

High · published May 9, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts, could also be called from unprivileged accounts. This demonstrates that no access controls were implemented for the different BLE commands across the different accounts. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00516 · 43.1th percentile
Published
2024-05-09T19:39Z
EPSS history
Timeline
  • 09 MAY 19:39Z
    An issue was discovered on certain Nuki Home Solutions devices
    cvelistv5