PT-2022-7195 · Ultraloq · Ultraloq Ul3 2Nd Gen Smart Lock

Alexios Mylonas + 2 · Published 2022-05-12 · Updated 2024-01-16 · CVE-2022-46480

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Ultraloq UL3 2nd Gen Smart Lock Firmware version 02.27.0012

Description The issue is related to incorrect session management and credential re-use in the Bluetooth LE stack, allowing an attacker to sniff the unlock code and unlock the device while within Bluetooth range. This can lead to the disclosure of protected information.

Recommendations For Ultraloq UL3 2nd Gen Smart Lock Firmware version 02.27.0012, consider disabling the Bluetooth LE functionality until a patch is available to prevent exploitation. Restrict access to the device when not in use to minimize the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Session Fixation

Weakness Enumeration

CWE-294

CWE-384

Related Identifiers

BDU:2023-09009

CVE-2022-46480

Affected Products

Ultraloq Ul3 2Nd Gen Smart Lock

References · 10

• 🔥 https://researchgate.net/publication/375759408_Technical_Report_-_CVE-2022-46480_CVE-2023-26941_CVE-2023-26942_and_CVE-2023-26943#fullTextFileContent · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-46480 · Security Note
• https://osv.dev/vulnerability/CVE-2022-46480 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-09009 · Security Note
• https://arxiv.org/abs/2312.00021 · Note
• https://twitter.com/CVEnew/status/1731817470443631004 · Twitter Post
• https://vuldb.com/?id.246836 · Note
• https://t.me/cvenotify/67500 · Telegram Post
• https://twitter.com/gastronomy/status/1731500493279469815 · Twitter Post
• https://synology.com/en-global/security/advisory/Synology_SA_22_25 · Note