CVE-2023-7009
Published: 15 March 2024
Summary
CVE-2023-7009 is a high-severity an unspecified weakness vulnerability in Alephsecurity (inferred from references). Its CVSS base score is 8.2 (High).
Operationally, ranked at the 12.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-59201
Vulnerability details
Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were…
more
encrypted communications. This can be further exploited by an attacker to compromise the lock's integrity.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.