CVEs-PoC/2023/CVE-2023-7003.md

CVE-2023-7003

Description

The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.

POC

Reference

• https://alephsecurity.com/2024/03/07/kontrol-lux-lock-2/

Github

• https://github.com/NaInSec/CVE-LIST
• https://github.com/fkie-cad/nvd-json-data-feeds