Back to search
CVE-2023-7017
Published: Mar 15, 2024
Modified: Nov 4, 2025
PUBLISHED
Description
Sciener locks' firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through the Bluetooth Low Energy service. A challenge request can be sent to the lock with a command to prepare for an update, rather than an unlock request, allowing an attacker to compromise the device.
| Vendor | Product | Versions |
|---|---|---|
Sciener | Kontrol Lux | affected 6.5.x - <= 6.5.07 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now