Vulnerability · Published Jul 12, 2022 · Assigned by mitre
CVE-2022-35648
Low 2.6
In plain English
A low-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)2.6Low
Exploit odds (30 days)0.3%top 77.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).
Affected products (as reported)
References
- https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf x_refsource_MISC
- https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard x_refsource_MISC
- https://cwe.mitre.org/data/definitions/372.html x_refsource_MISC