Back to directory
WRITEUP #2457

Technical Advisory – Multiple vulnerabilities in Nuki smart locks (CVE-2022-32509, CVE-2022-32504, CVE-2022-32502, CVE-2022-32507, CVE-2022-32503, CVE-2022-32510, CVE-2022-32506, CVE-2022-32508, CVE-2022-32505)

OtherMemory corruptionDoSBroken Access ControlSensitive Information Sent Over an Unencrypted Channel
by@daniel_rome(Daniel Romero)
Program
Nuki
Published
Jul 25, 2022
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/
RELATED WRITEUPS
Vulnerabilities in NodeJS C/C++ add-on extensions
OtherMemory corruption
Ghost In The Ppl Part 1: Byovdll
OtherUse-After-Free
Part 2: From Byovdll To Arbitrary Code Execution In Lsass
OtherUse-After-Free
Ghost in the PPL Part 3: LSASS Memory Dump
OtherUse-After-Free
CVE-2024-37079:
OtherInteger underflow

Built with ❤️ by Shubham Rawat