Kontrol Lux
Approved changes feed: RSS · Atom
cpe:2.3:a:sciener:kontrol_lux:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sciener (0ce94359-0512-578e-a1af-5e1e5a2fda77) |
|---|---|
| Product | Kontrol Lux (4f6fdbfa-8ad8-567f-b7cc-35b185e17460) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7017 |
vulnerable | 2026-06-08 06:21:56.619276 |
CVE-2023-7017
Sciener locks' firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through the Bluetooth Low Energy service. A challenge request can be sent to the lock with a command to prepare for an update, rather than an unlock request, allowing an attacker to compromise the device.
Published: 2024-03-15T17:07:28.081Z
Updated: 2025-11-04T18:22:12.788Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7009 |
vulnerable | 2026-06-08 06:21:56.596867 |
CVE-2023-7009
Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be further exploited by an attacker to compromise the lock's integrity.
Published: 2024-03-15T17:07:48.318Z
Updated: 2025-11-04T18:22:11.492Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7006 |
vulnerable | 2026-06-08 06:21:56.583045 |
CVE-2023-7006
The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks integrity.
Published: 2024-03-15T17:08:34.433Z
Updated: 2025-11-04T18:22:09.047Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7003 |
vulnerable | 2026-06-08 06:21:56.578911 |
CVE-2023-7003
The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.
Published: 2024-03-15T17:09:14.442Z
Updated: 2025-11-04T18:22:05.474Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.