Skip to content
OpenAdvisories

Vendor

Sciener

9 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.1

    CVE-2023-7006

    The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks integrity.

  • Critical 9.8

    CVE-2023-7017

    Sciener locks' firmware update mechanism do not authenticate or validate firmware updates if passed to the lock through the Bluetooth Low Energy service. A challenge request can be sent to the lock with a command to prepare for an update, rather than an unloc…