exploitDog

CVE-2022-30111

Опубликовано: 18 мая 2022

Источник: nvd

CVSS3: 6.8

CVSS2: 4.6

EPSS Низкий

Описание

Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.

Ссылки

https://tiger-team-1337.blogspot.com/2022/05/rf-remote-mck-lock-predictable-rolling.html
Exploit
Third Party Advisory
https://twitter.com/Kevin2600/status/1495007534419038213
Exploit
Third Party Advisory
https://www.youtube.com/watch?v=EruaGuE-cWI
Exploit
Third Party Advisory
https://tiger-team-1337.blogspot.com/2022/05/rf-remote-mck-lock-predictable-rolling.html
Exploit
Third Party Advisory
https://twitter.com/Kevin2600/status/1495007534419038213
Exploit
Third Party Advisory
https://www.youtube.com/watch?v=EruaGuE-cWI
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mck_smartlock_project:mck_smartlock:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00117

Низкий

6.8 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-327

Связанные уязвимости

GHSA-2v4w-wv8c-jp4f

CVSS3: 6.8

github

больше 3 лет назад

Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.

EPSS

Процентиль: 31%

0.00117

Низкий

6.8 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-327