CVE-2022-32502: Nuki Smart Lock

Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered on certain Nuki Home Solutions devices. There is a buffer overflow over the encrypted token parsing logic in the HTTP service that allows remote code execution. This affects Nuki Bridge v1 before 1.22.0 and v2 before 2.13.2.

Affected products

• Nuki Nuki Smart Lock: before 1.22.0 (fixed in 1.22.0); before 2.13.2 (fixed in 2.13.2)

Published 2024-05-14. Last modified 2026-06-17.