Vulnerability · Published May 18, 2022 · Assigned by mitre

CVE-2022-30111

Medium 6.8

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS NVD)6.8Medium

Exploit odds (30 days)0.3%top 75.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.youtube.com/watch?v=EruaGuE-cWI x_refsource_MISC
https://twitter.com/Kevin2600/status/1495007534419038213 x_refsource_MISC
https://tiger-team-1337.blogspot.com/2022/05/rf-remote-mck-lock-predictable-rolling.html x_refsource_MISC