CVE-2023-7017 CVE-2023-7017
Attackers can compromise Sciener Kontrol Lux smart locks by sending unauthenticated firmware updates via Bluetooth Low Energy.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-7017?
CVE-2023-7017 is a critical missing authorization vulnerability in Sciener Kontrol Lux, published on 15 Mar 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sciener locks' firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through the Bluetooth Low Energy service. A challenge request can be sent to the lock with a command to prepare for an update, rather than an unlock request, allowing an attacker to compromise the device.
Which versions are affected by CVE-2023-7017?
How do I fix CVE-2023-7017?
No fix has been published for CVE-2023-7017 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-7017 being exploited?
There is no known exploitation of CVE-2023-7017 in the wild and no public exploit code.
Sources
Also known as GHSA-r4j8-hwcx-q55j.