{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-11T09:49:35.596","vulnerabilities":[{"cve":{"id":"CVE-2022-3007","sourceIdentifier":"vdisclose@cert-in.org.in","published":"2023-10-31T12:15:08.597","lastModified":"2024-11-21T07:18:37.613","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"vdisclose@cert-in.org.in","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update (DFU) which is used for performing Over-The-Air (OTA) firmware updates on the Bluetooth Low Energy (BLE) devices. An unauthenticated attacker could exploit this vulnerability by setting arbitrary values to handle on the vulnerable device over Bluetooth.\n\nSuccessful exploitation of this vulnerability could allow the attacker to perform firmware update, device reboot or data manipulation on the target device.\n"},{"lang":"es","value":"** NO COMPATIBLE CUANDO ESTÁ ASIGNADO ** La vulnerabilidad existe en Syska SW100 Smartwatch debido a una implementación y/o configuración incorrecta de la Actualización de firmware del dispositivo nórdico (DFU) que se utiliza para realizar actualizaciones de firmware por aire (OTA) en Bluetooth Low Dispositivos de energía (BLE). Un atacante no autenticado podría aprovechar esta vulnerabilidad estableciendo valores arbitrarios para manejar en el dispositivo vulnerable a través de Bluetooth. La explotación exitosa de esta vulnerabilidad podría permitir al atacante realizar actualizaciones de firmware, reiniciar el dispositivo o manipular datos en el dispositivo objetivo."}],"metrics":{"cvssMetricV31":[{"source":"vdisclose@cert-in.org.in","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}]},"weaknesses":[{"source":"vdisclose@cert-in.org.in","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:syska:sw100_smartwatch_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"53987C98-292E-43E6-ABBF-007AA9422FAB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:syska:sw100_smartwatch:-:*:*:*:*:*:*:*","matchCriteriaId":"C036D702-E9F6-4597-8AE6-2B9761035221"}]}]}],"references":[{"url":"https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0333","source":"vdisclose@cert-in.org.in","tags":["Third Party Advisory"]},{"url":"https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}