medium6.5
CVE-2022-36228
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions.
Impact
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Janusintl | Noke Standard Smart Padlock Firmware | Version 5.3.0 |
| Janusintl | Noke Hd Smart Padlock Firmware | Version 5.3.0 |
| Janusintl | Noke Hd\+ Smart Padlock Firmware | Version 5.3.0 |