Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-46307

SGUDA U-Lock - Broken Access Control

Description

SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SGUDA U-Lock

  • 0unknown

References