{"id":"CVE-2022-32505","state":"PUBLISHED","title":"An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This","description":"An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4.","publishedAt":"2024-05-09T19:51:38.689Z","updatedAt":"2025-03-13T16:07:17.643Z","severity":{"score":7.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/","https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/","https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/","https://nuki.io/en/security-updates/"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T19:50:09.278Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/32xxx/CVE-2022-32505.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-32505","state":"PUBLISHED","datePublished":"2024-05-09T19:51:38.689Z","dateUpdated":"2025-03-13T16:07:17.643Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2022-06-06T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/"},{"url":"https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/"},{"url":"https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/"},{"url":"https://nuki.io/en/security-updates/"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2024-05-09T19:51:39.147Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://research.nccgroup.com/2022/07/25/technical-advisory-multiple-vulnerabilities-in-nuki-smart-locks-cve-2022-32509-cve-2022-32504-cve-2022-32502-cve-2022-32507-cve-2022-32503-cve-2022-32510-cve-2022-32506-cve-2022-32508-cve-2/","tags":["x_transferred"]},{"url":"https://www.hackread.com/nuki-smart-locks-vulnerabilities-plethora-attack-options/","tags":["x_transferred"]},{"url":"https://latesthackingnews.com/2022/07/28/multiple-security-flaws-found-in-nuki-smart-locks/","tags":["x_transferred"]},{"url":"https://nuki.io/en/security-updates/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T07:46:43.497Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"nuki","product":"smart_lock_v3_pro","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"3.3.5","versionType":"custom"}],"cpes":["cpe:2.3:a:nuki:smart_lock_v3_pro:*:*:*:*:*:*:*:*"]},{"vendor":"nuki","product":"smart_lock_v2","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"2.12.4","versionType":"custom"}],"cpes":["cpe:2.3:a:nuki:smart_lock_v2:*:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-08-19T16:31:55.242424Z","id":"CVE-2022-32505","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","type":"CWE","lang":"en","description":"CWE-400 Uncontrolled Resource Consumption"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-13T16:07:17.643Z"}}]}}}