CVE-2017-17435
HighSummary
An issue was discovered in Vaultek Gun Safe VT20i products that allows an attacker to remotely unlock the safe without a valid PIN code. Although the mobile application requires a PIN, the safe does not verify it, enabling authorization with any value.
Risk Assessment
An attacker can remotely open the safe, posing a serious threat to the security of items stored inside. Organizations using these products should be aware of the risks associated with unauthorized access.
Recommendation
It is recommended to immediately update the safe's software and implement additional security measures to minimize the risk of unauthorized access.
Other vulnerabilities in Vaultek Gun Safe VT20i
Original NVD description (English source)
An issue was discovered in the software on Vaultek Gun Safe VT20i products, aka BlueSteal. An attacker can remotely unlock any safe in this product line without a valid PIN code. Even though the phone application requires it and there is a field to supply the PIN code in an authorization request, the safe does not check the PIN code, so an attacker can obtain authorization using any value. Once an attacker sees the Bluetooth Low Energy (BLE) advertisement for the safe, they need only to write a BLE characteristic to enable notifications, and send a crafted getAuthor packet that returns a temporary key, and an unlock packet including that temporary key. The safe then opens after the unlock packet is processed, with no verification of PIN or other credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS