CVE-2022-35648 - Vulnerability Details - OpenCVE

Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).

No CVSS v4.0

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Nautilus	T616 T616 Firmware T618 T618 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:nautilus:t618_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:nautilus:t618:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:nautilus:t616_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:nautilus:t616:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://cwe.mitre.org/data/definitions/372.html
https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf
https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-07-12T03:30:39

Updated: 2024-08-03T09:36:44.418Z

Reserved: 2022-07-12T00:00:00

Link: CVE-2022-35648

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-07-12T14:15:24.907

Modified: 2024-11-21T07:11:25.850

Link: CVE-2022-35648

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time)."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 2.6, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AC:L/AV:P/A:L/C:N/I:N/PR:N/S:C/UI:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-07-12T03:51:32", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf"}, {"tags": ["x_refsource_MISC"], "url": "https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard"}, {"tags": ["x_refsource_MISC"], "url": "https://cwe.mitre.org/data/definitions/372.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-35648", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time)."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AC:L/AV:P/A:L/C:N/I:N/PR:N/S:C/UI:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf", "refsource": "MISC", "url": "https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf"}, {"name": "https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard", "refsource": "MISC", "url": "https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard"}, {"name": "https://cwe.mitre.org/data/definitions/372.html", "refsource": "MISC", "url": "https://cwe.mitre.org/data/definitions/372.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T09:36:44.418Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://cwe.mitre.org/data/definitions/372.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-35648", "datePublished": "2022-07-12T03:30:39", "dateReserved": "2022-07-12T00:00:00", "dateUpdated": "2024-08-03T09:36:44.418Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nautilus:t618_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "27C296BE-6276-45F8-97E6-DDA3D9FF18E7", "versionEndExcluding": "2022-06-09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nautilus:t618:*:*:*:*:*:*:*:*", "matchCriteriaId": "BC8DC73D-6B7F-48E7-9247-DA3B08A6A77A", "versionEndIncluding": "100647pro21183960", "versionStartIncluding": "100647pro21130111", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nautilus:t616_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "99A7A83F-DA96-4CA5-B4CB-CFE2FF2CE1F4", "versionEndExcluding": "2022-06-09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nautilus:t616:*:*:*:*:*:*:*:*", "matchCriteriaId": "93BBD527-872C-40A8-93B2-CE21F81C4B01", "versionEndIncluding": "100672pro21171980", "versionStartIncluding": "100672pro21140001", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time)."}, {"lang": "es", "value": "Nautilus treadmills T616 S/N 100672PRO21140001 a 100672PRO21171980 y T618 S/N 100647PRO21130111 a 100647PRO21183960 con software anterior a 09-06-2022, permiten a atacantes f\u00edsicamente pr\u00f3ximos causar una denegaci\u00f3n de servicio (bloqueo) al conectar el cable de alimentaci\u00f3n a un circuito de 120V (lo que puede conllevar a el autoarranque en un momento no oportuno)"}], "id": "CVE-2022-35648", "lastModified": "2024-11-21T07:11:25.850", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 2.6, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 1.4, "source": "cve@mitre.org", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-07-12T14:15:24.907", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://cwe.mitre.org/data/definitions/372.html"}, {"source": "cve@mitre.org", "tags": ["Product", "Vendor Advisory"], "url": "https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf"}, {"source": "cve@mitre.org", "tags": ["Product", "US Government Resource"], "url": "https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://cwe.mitre.org/data/definitions/372.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Vendor Advisory"], "url": "https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "US Government Resource"], "url": "https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}