Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allows an attacker to sniff the unlock code and unlock the device whilst within Bluetooth range.
References
| Link | Resource |
|---|---|
| https://arxiv.org/abs/2312.00021 | |
| https://www.researchgate.net/publication/375759408_Technical_Report_-_CVE-2022-46480_CVE-2023-26941_CVE-2023-26942_and_CVE-2023-26943#fullTextFileContent | Exploit Technical Description Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Jan 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://www.researchgate.net/publication/375759408_Technical_Report_-_CVE-2022-46480_CVE-2023-26941_CVE-2023-26942_and_CVE-2023-26943#fullTextFileContent - Exploit, Technical Description, Third Party Advisory | |
| CPE | cpe:2.3:o:u-tec:ultraloq_ul3_bt_firmware:02.27.0012:*:*:*:*:*:*:* cpe:2.3:h:u-tec:ultraloq_ul3_bt:2nd_gen:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| CWE | CWE-384 CWE-294 |
|
| First Time |
U-tec
U-tec ultraloq Ul3 Bt U-tec ultraloq Ul3 Bt Firmware |
05 Dec 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-05 00:15
Updated : 2024-02-28 20:54
NVD link : CVE-2022-46480
Mitre link : CVE-2022-46480
CVE.ORG link : CVE-2022-46480
JSON object : View
Products Affected
u-tec
- ultraloq_ul3_bt_firmware
- ultraloq_ul3_bt