CVE-2022-36228: Janusintl Noke Hd+ Smart Padlock Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app.

Affected products

• Janusintl Noke Hd+ Smart Padlock Firmware: version 5.3.0 only
• Janusintl Noke Hd Smart Padlock Firmware: version 5.3.0 only
• Janusintl Noke Standard Smart Padlock Firmware: version 5.3.0 only

Published 2023-10-09. Last modified 2026-06-17.