Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2022-35648

2.6 · LOW

Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attacker…

Published Jul 12, 2022EPSS 0.30%

Overview

CVE-2022-35648 is a low-severity vulnerability. It was published on July 12, 2022 and has a CVSS 3.1 base score of 2.6 (LOW).

This vulnerability has a CVSS 3.1 base score of 2.6, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.

Technical description

Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refcwe.mitre.org/data/definitions/372.htmlRefdownload.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdfRefwww.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-HazardRefcwe.mitre.org/data/definitions/372.htmlRefdownload.nautilus.com/pdf/NLS.T616-T618.cpsc.safety.notice.EN.pdfRefwww.cpsc.gov/Recalls/2022/Nautilus-Recalls-Treadmills-Due-to-Fall-Hazard

How CyberStrike helps

Frequently asked questions

What is CVE-2022-35648?

CVE-2022-35648 is a low-severity vulnerability. It was published on July 12, 2022 and has a CVSS 3.1 base score of 2.6 (LOW).

How severe is CVE-2022-35648?

This vulnerability has a CVSS 3.1 base score of 2.6, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.

How do I fix or remediate CVE-2022-35648?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2022-35648?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2022-35648 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related LOW CVEs from 2022

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999