CVE-2023-7003

Description

The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.

Reserved 2023-12-20 | Published 2024-03-15 | Updated 2024-09-24 | Assigner certcc

Problem types

CWE-323 Reusing a Nonce, Key Pair in Encryption

Product status

6.5.x
affected

References

alephsecurity.com/2024/03/07/kontrol-lux-lock-2/

cve.org (CVE-2023-7003)

nvd.nist.gov (CVE-2023-7003)

Download JSON