CVE-2022-32506
Medium
Description
An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to control the execution of code on the processor and debug the firmware, as well as read or alter the content of the internal and external flash memory. This affects Nuki Smart Lock 3.0 before 3.3.5, Nuki Smart Lock 2.0 before 2.12.4, as well as Nuki Bridge v1 before 1.22.0 and v2 before 2.13.2.
SeverityMedium
CVSS6.4
Exploit probability38. percentile0.4%
ProductNuki Smart Lock
PublishedMay 14, 2024
First seenMay 14, 2024
Weakness typeCWE-1263CWE-1263
How to fix
Update
- nuki smart_lock3.3.5, 2.12.4 or later
- nuki smart_lock_firmware3.3.5, 2.12.4 or later
- nuki bridge2.13.2, 1.22.0 or later
- nuki bridge_firmware2.13.2, 1.22.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuki smart_lock | 3.0 ≤ v < 3.3.5, 2.0 ≤ v < 2.12.4 | 3.3.5, 2.12.4 |
| nuki smart_lock_firmware | 3.0 ≤ v < 3.3.5, 2.0 ≤ v < 2.12.4 | 3.3.5, 2.12.4 |
| nuki bridge | 2.0 ≤ v < 2.13.2, 1.0 ≤ v < 1.22.0 | 2.13.2, 1.22.0 |
| nuki bridge_firmware | 2.0 ≤ v < 2.13.2, 1.0 ≤ v < 1.22.0 | 2.13.2, 1.22.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.