CVE-2022-35648: Nautilus t616 Firmware

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).

Affected products

• Nautilus t616 Firmware: before 2022-06-09 (fixed in 2022-06-09)
• Nautilus t618 Firmware: before 2022-06-09 (fixed in 2022-06-09)

Published 2022-07-12. Last modified 2026-06-17.