The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.
References
Configurations
No configuration.
History
04 Nov 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Nov 2024, 08:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/ - |
25 Sep 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-323 |
22 Aug 2024, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.8 |
15 Mar 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-15 17:15
Updated : 2025-11-04 19:16
NVD link : CVE-2023-7003
Mitre link : CVE-2023-7003
CVE.ORG link : CVE-2023-7003
JSON object : View
Products Affected
No product.
CWE
CWE-323
Reusing a Nonce, Key Pair in Encryption