CVE-2022-35648
Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the…
Does this matter?
Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.
Description
Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).
- CVSS 3.1
- 2.4 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- EPSS
- 0.30% probability · 22th percentile
- CISA KEV
- Not listed
- Affected
- nautilus/t618 firmware · nautilus/t616 firmware
- Source
- cve@mitre.org
References
- https://cwe.mitre.org/data/definitions/372.htmlThird Party Advisory, VDB Entry
- https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdfProduct, Vendor Advisory
- https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-HazardProduct, US Government Resource
- https://cwe.mitre.org/data/definitions/372.htmlThird Party Advisory, VDB Entry
- https://download.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdfProduct, Vendor Advisory
- https://www.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-HazardProduct, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.