Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-46308

SGUDA U-Lock - Broken Access Control

SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with general user privilege can exploit this vulnerability to call privileged APIs to access, modify and delete user information.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Sguda
Products
U-lock U-lock Firmware
CVE-2022-46307

SGUDA U-Lock - Broken Access Control

SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Sguda
Products
U-lock U-lock Firmware