CVE-2023-7003

EUVD-2023-59195
The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
scienerttlock_app
6.5.0 ≤
𝑥
≤ 6.5.07
ADP
Common Weakness Enumeration
References
https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/
https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/
https://www.kb.cert.org/vuls/id/949046