Vulnerability in Nautilus T616
CVE-2022-35648
Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).
EPSS: 0.003 (22.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L.
Affected products
- Nautilus T616
- Nautilus T616_firmware
- Nautilus T618
- Nautilus T618_firmware
- N/a — versions n/a
References
- cve@mitre.org (Product, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (US Government Resource, Product, x_refsource_MISC)
- cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-35648?
- CVE-2022-35648 is a low-severity vulnerability in Nautilus T616. CVSS score: 2.6/10. Published 2022-07-12.
- How severe is CVE-2022-35648?
- Low severity. CVSS v3 base score is 2.6 out of 10.