pentester.land· Jul 25, 2022· by Daniel Romero (@daniel_rome), Pablo Lorenzo & Guillermo del Valle Gil🔍 CVE-2022-32509

Technical Advisory – Multiple vulnerabilities in Nuki smart locks (CVE-2022-32509, CVE-2022-32504, CVE-2022-32502, CVE-2022-32507, CVE-2022-32503, CVE-2022-32510, CVE-2022-32506, CVE-2022-32508, CVE-2022-32505)

Target Program: Nuki

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Memory corruption#DoS#Broken Access Control#Sensitive Information Sent Over an Unencrypted Channel#CVE-2022-32509#CVE-2022-32504#CVE-2022-32502#CVE-2022-32507#CVE-2022-32503#CVE-2022-32510

Technical Advisory – Multiple vulnerabilities in Nuki smart locks (CVE-2022-32509, CVE-2022-32504, CVE-2022-32502, CVE-2022-32507, CVE-2022-32503, CVE-2022-32510, CVE-2022-32506, CVE-2022-32508, CVE-2022-32505)

More Writeups Like This

Vulnerabilities in NodeJS C/C++ add-on extensions

17 vulnerabilities in Sharp Multi-Function Printers

TP-Link TDDP Buffer Overflow Vulnerability

SSD Advisory – TP-Link TL-WR840N Stack Buffe Overflow DOSy