Vulnerability in Nautilus T616
CVE-2022-35648
Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).
Published · last modified .
CVSS v3 metric
CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L.
EPSS exploit prediction
EPSS: 0.003 (20.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 20th percentile — 20.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
References
- download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf (Product, Vendor Advisory)
- www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard (US Government Resource, Product)
- cwe.mitre.org/data/definitions/372.html (VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-35648?
- CVE-2022-35648 is a low-severity vulnerability in Nautilus T616. CVSS score: 2.6/10. Published 2022-07-12.
- How severe is CVE-2022-35648?
- Low severity. CVSS v3 base score is 2.6 out of 10.