Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities found for Lock Series Lock by SwitchBot

    CVE-2026-8374 (GCVE-0-2026-8374)

    Vulnerability from nvd – Published: 2026-10-09 12:09 – Updated: 2026-10-09 12:09
    VLAI
    Title
    Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication
    Summary
    Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.
    Severity
    8.5 (High)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:P/AU:N/R:I/V:D/RE:H/U:Red
    CWE
    • CWE-1204 - Generation of weak initialization vector (IV)
    • CWE-1240 - Use of a cryptographic primitive with a risky implementation
    Assigner
    cirosec CNA under the mitre root
    CNA scorecard – unranked: 1 record in the last 180 days, 10 needed details
    References
    Impacted products
    Credits
    Aaron Kaiser (Neodyme AG) Tobias Madl (Neodyme AG) Justin Mietzner (Neodyme AG)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Bluetooth communication"
          ],
          "product": "Lock Series Lock",
          "vendor": "SwitchBot",
          "versions": [
            {
              "lessThanOrEqual": "3.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Bluetooth communication"
          ],
          "product": "Lock Series Keypad",
          "vendor": "SwitchBot",
          "versions": [
            {
              "lessThanOrEqual": "2.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Bluetooth communication"
          ],
          "platforms": [
            "Android"
          ],
          "product": "Lock Series App",
          "vendor": "SwitchBot",
          "versions": [
            {
              "lessThanOrEqual": "9.2.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Aaron Kaiser (Neodyme AG)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Tobias Madl (Neodyme AG)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Justin Mietzner (Neodyme AG)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol."
            }
          ],
          "value": "Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-395",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-395 Bypassing Electronic Locks and Access Controls"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "IRRECOVERABLE",
            "Safety": "PRESENT",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:P/AU:N/R:I/V:D/RE:H/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1204",
              "description": "CWE-1204 Generation of weak initialization vector (IV)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1240",
              "description": "CWE-1240 Use of a cryptographic primitive with a risky implementation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-09T12:09:07.506Z",
        "orgId": "a341c0d1-ebf7-493f-a84e-38cf86618674",
        "shortName": "cirosec"
      },
      "references": [
        {
          "url": "https://neodyme.io/en/advisories/cve-2026-8374/"
        },
        {
          "url": "https://neodyme.io/en/blog/switchbot/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a341c0d1-ebf7-493f-a84e-38cf86618674",
    "assignerShortName": "cirosec",
    "cveId": "CVE-2026-8374",
    "datePublished": "2026-10-09T12:09:07.506Z",
    "dateReserved": "2026-05-12T07:14:40.536Z",
    "dateUpdated": "2026-10-09T12:09:07.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-8374 (GCVE-0-2026-8374)

    Vulnerability from cvelistv5 – Published: 2026-10-09 12:09 – Updated: 2026-10-09 12:09
    VLAI
    Title
    Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication
    Summary
    Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.
    Severity
    8.5 (High)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:P/AU:N/R:I/V:D/RE:H/U:Red
    CWE
    • CWE-1204 - Generation of weak initialization vector (IV)
    • CWE-1240 - Use of a cryptographic primitive with a risky implementation
    Assigner
    cirosec CNA under the mitre root
    CNA scorecard – unranked: 1 record in the last 180 days, 10 needed details
    References
    Impacted products
    Credits
    Aaron Kaiser (Neodyme AG) Tobias Madl (Neodyme AG) Justin Mietzner (Neodyme AG)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Bluetooth communication"
          ],
          "product": "Lock Series Lock",
          "vendor": "SwitchBot",
          "versions": [
            {
              "lessThanOrEqual": "3.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Bluetooth communication"
          ],
          "product": "Lock Series Keypad",
          "vendor": "SwitchBot",
          "versions": [
            {
              "lessThanOrEqual": "2.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Bluetooth communication"
          ],
          "platforms": [
            "Android"
          ],
          "product": "Lock Series App",
          "vendor": "SwitchBot",
          "versions": [
            {
              "lessThanOrEqual": "9.2.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Aaron Kaiser (Neodyme AG)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Tobias Madl (Neodyme AG)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Justin Mietzner (Neodyme AG)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol."
            }
          ],
          "value": "Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-395",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-395 Bypassing Electronic Locks and Access Controls"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "IRRECOVERABLE",
            "Safety": "PRESENT",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:P/AU:N/R:I/V:D/RE:H/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1204",
              "description": "CWE-1204 Generation of weak initialization vector (IV)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1240",
              "description": "CWE-1240 Use of a cryptographic primitive with a risky implementation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-09T12:09:07.506Z",
        "orgId": "a341c0d1-ebf7-493f-a84e-38cf86618674",
        "shortName": "cirosec"
      },
      "references": [
        {
          "url": "https://neodyme.io/en/advisories/cve-2026-8374/"
        },
        {
          "url": "https://neodyme.io/en/blog/switchbot/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a341c0d1-ebf7-493f-a84e-38cf86618674",
    "assignerShortName": "cirosec",
    "cveId": "CVE-2026-8374",
    "datePublished": "2026-10-09T12:09:07.506Z",
    "dateReserved": "2026-05-12T07:14:40.536Z",
    "dateUpdated": "2026-10-09T12:09:07.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}