High severity · published Mar 15, 2024
CVE-2023-7009
No description published yet
8.2
CVSS
0.2%
EPSS
No
On KEV
Description
Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be further exploited by an attacker to compromise the lock's integrity.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KL
Kontrol Lux · Sciener
6.5.x through 6.5.07 · source: vendor
KL
Kontrol Lux Firmware · Sciener
6.5 through 6.5.07 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-7009
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-7009
alephsecurity.com
https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/
www.kb.cert.org
https://www.kb.cert.org/vuls/id/949046
More from Kontrol Lux
9.8
CVE-2023-7017
No description published yet
9.1
CVE-2023-7006
No description published yet
6.8
CVE-2023-7003
No description published yet
