CVE-2022-46307

8.8 highEPSS 0.7%

High (8.8) in sguda u-lock firmware. EPSS 0.7% chance of exploitation in the next 30 days.

SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sguda:u-lock_firmware

References

https://www.twcert.org.tw/tw/cp-132-7099-e8897-1.html
https://www.twcert.org.tw/tw/cp-132-7099-e8897-1.html

Check your stack JSON