What is CVE-2022-32509?

CVE-2022-32509 is a high-severity vulnerability in N/a, classified under Improper Certificate Validation. CVSS score: 8.8/10. Published 2024-05-14.

How severe is CVE-2022-32509?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in N/a

CVE-2022-32509

An issue was discovered on certain Nuki Home Solutions devices. Lack of certificate validation on HTTP communications allows attackers to intercept and tamper data. This affects Nuki Smart Lock 3.0 before 3.3.5, Nuki Bridge v1 before 1.22…

Vulnerability class: Improper Certificate Validation

EPSS: 0.003 (20.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

cve@mitre.org
cve@mitre.org
cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2022-32509?: CVE-2022-32509 is a high-severity vulnerability in N/a, classified under Improper Certificate Validation. CVSS score: 8.8/10. Published 2024-05-14.
How severe is CVE-2022-32509?: High severity. CVSS v3 base score is 8.8 out of 10.