CVE-2023-7003CWE-323

CVE-2023-7003

Medium · published March 15, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-323 · Reusing a Nonce, Key Pair in Encryption
Published
2024-03-15T17:09Z
EPSS history
Timeline
  • 15 MAR 17:09Z
    CVE-2023-7003
    cvelistv5