CVE-2022-32505
High
Description
An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4.
SeverityHigh
CVSS7.1
Exploit probability—
ProductNuki Smart Lock V3 Pro
PublishedMay 14, 2024
First seenMay 14, 2024
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- nuki smart_lock_v3_pro3.3.5 or later
- nuki smart_lock_v22.12.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuki smart_lock_v3_pro | v < 3.3.5 | 3.3.5 |
| nuki smart_lock_v2 | v < 2.12.4 | 2.12.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.