cve.bz

CVE-2022-46480

8.1 highEPSS 0.5%

High (8.1) in u-tec ultraloq ul3 bt firmware. EPSS 0.5% chance of exploitation in the next 30 days.

Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allows an attacker to sniff the unlock code and unlock the device whilst within Bluetooth range.

Severity

CVSS 3.1

8.1 high
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs
CWE-294, CWE-384
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON