CVE-2023-7003 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Assigner	certcc
Reserved	2023-12-20
Published	2024-03-15
Updated	2024-09-24

Description

The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.

Product status

6.5.x

affected

References

https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/

cve.org CVE-2023-7003

nvd.nist.gov CVE-2023-7003

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.