Misuse and misconfiguration in the Bluetooth communication of SwitchBot Door Lock Series devices allows an attacker to manipulate the protocol and bypass the electronic lock controls. This flaw can be exploited to unlock the door from a distance, granting unauthorized physical access to the premises. The vulnerability arises from improper handling of cryptographic checks during communication. The primary consequence is that a remote adversary can gain entry without legitimate credentials, thereby compromising the security of the locked environment.

Affected products include the SwitchBot Lock Series App, Lock Series Keypad, and Lock hardware. The issue manifests in any device using the current firmware version that has not applied the fault mitigation. No specific version numbers are disclosed; all SwitchBot products built on the existing Bluetooth stacking are potentially vulnerable.

Based on the description, it is inferred that the attacker would need only Bluetooth proximity to craft and transmit malicious protocol frames. The CVSS score of 8.5 indicates a high severity with a significant exploitation potential. EPSS data is not available, making it unclear how frequently attackers leverage this flaw, but the fact that remote enforcement is possible over standard Bluetooth ranges suggests the attack is feasible in many environments. The vulnerability is not listed in the CISA KEV catalog, so no confirmed exploits exist at this time. This inference indicates that even unsophisticated adversaries could carry out the attack.