CVE-2024-36438

EUVD-2024-36084
eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CISA-ADPADP
7.3 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
Common Weakness Enumeration
References
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-044.txt
https://www.syss.de/pentest-blog/
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-044.txt
https://www.syss.de/pentest-blog/