SARA / Free Tools / CVE / CVE-2022-35648

CVE-2022-35648 — Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T61

Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circui

CVSS
2.6 LOW
EPSS
0.08% (top 77.30%)
CWE
—
Published
2022-07-12T03:30:39.000Z
Last modified
2024-08-03T09:36:44.418Z
CVSS vector
CVSS:3.1/AC:L/AV:P/A:L/C:N/I:N/PR:N/S:C/UI:N

01What is this vulnerability?

Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).

02Affected products

VendorProductVersions
na / n/an/a

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →