PatchTheCVEu-lock firmware vulnerabilities and fixes
Recent CVEs affecting u-lock firmware, with upgrade or downgrade steps. 2 tracked.
Also searched as: u lock firmware, u-lockfirmware.
u-lock firmware has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-06-02. Highest priority: CVE-2022-46308 (score 44/100).
- CVE-2022-46308 HIGH 8.8 MITIGATE SGUDA U-Lock central lock control service’s user management function has incorrect authorization
- CVE-2022-46307 HIGH 8.8 MITIGATE SGUDA U-Lock central lock control service’s lock management function has incorrect authorization
FAQ
How do I fix u-lock firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is u-lock firmware being exploited right now?
None of the tracked u-lock firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which u-lock firmware CVE should I patch first?
CVE-2022-46308 currently ranks highest (44/100): SGUDA U-Lock central lock control service’s user management function has incorrect authorization.