CVE-2022-32505

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-32505
An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/
https://nuki.io/en/security-updates/
https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/
https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/
https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/
https://nuki.io/en/security-updates/
https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/
https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/
Configurations

No configuration.

History

13 Mar 2025, 16:15

Type Values Removed Values Added
CWE CWE-400

21 Nov 2024, 07:06

Type Values Removed Values Added
References () https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/ - () https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/ -
References () https://nuki.io/en/security-updates/ - () https://nuki.io/en/security-updates/ -
References () https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/ - () https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/ -
References () https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/ - () https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/ -

19 Aug 2024, 17:35

Type Values Removed Values Added
Summary
  • (es) Se ha descubierto un problema en determinados dispositivos de Nuki Home Solutions. Es posible enviar varios paquetes BLE con formato incorrecto para bloquear algunas de las funciones y reiniciar el dispositivo. Esto afecta a Nuki Smart Lock 3.0 anterior a 3.3.5 y a Nuki Smart Lock 2.0 anterior a 2.12.4.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

14 May 2024, 10:43

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 10:43

Updated : 2025-03-13 16:15

NVD link : CVE-2022-32505

Mitre link : CVE-2022-32505

CVE.ORG link : CVE-2022-32505

JSON object : View

Products Affected

No product.

CWE
CWE-400

Uncontrolled Resource Consumption