Back

HIGH

SGUDA U-Lock - Broken Access Control

Published Jun 2, 2023

Description

SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks.

Affected products

Remediation

No remediation recorded yet.

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner twcert
Published Jun 2, 2023
Updated Jan 9, 2025
Reserved Nov 29, 2022

CISA Vulnrichment

Updated Jan 9, 2025

NVD

Status Modified
Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner twcert
Published Jun 2, 2023
Updated Jan 9, 2025

GitHub

No data