{
  "id": "CVE-2022-32509",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-05-14T10:43:42.160",
  "lastModified": "2024-11-21T07:06:31.157",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered on certain Nuki Home Solutions devices. Lack of certificate validation on HTTP communications allows attackers to intercept and tamper data. This affects Nuki Smart Lock 3.0 before 3.3.5, Nuki Bridge v1 before 1.22.0 and Nuki Bridge v2 before 2.13.2."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema en determinados dispositivos de Nuki Home Solutions. La falta de validaci\u00f3n de certificados en las comunicaciones HTTP permite a los atacantes interceptar y manipular datos. Esto afecta a Nuki Smart Lock 3.0 anterior a 3.3.5, Nuki Bridge v1 anterior a 1.22.0 y Nuki Bridge v2 anterior a 2.13.2."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://nuki.io/en/security-updates/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://nuki.io/en/security-updates/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}