bridge_v2 vulnerabilities

2 known vulnerabilities in bridge_v2 from Nuki. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  smart_lock_v3_pro: Improper Certificate Validation

  CVE-2022-32509May 14, 2024Nuki

  An issue was discovered on certain Nuki Home Solutions devices. Lack of certificate validation on HTTP communications allows attackers to intercept and tamper data. This affects Nuki Smart Lock 3.0 before 3.3.5, Nuki Bridge v1 before 1.22.0 and Nuki Bridge v2

• 7.5 High severity

  bridge_v1: Uncontrolled Resource Consumption

  CVE-2022-32508May 14, 2024NukiEPSS 1.28%

  An issue was discovered on certain Nuki Home Solutions devices. By sending a malformed HTTP verb, it is possible to force a reboot of the device. This affects Nuki Bridge v1 before 1.22.0 and v2 before 2.13.2.