Overview
- Description
- Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-09 allow physically proximate attackers to cause a denial of service (fall) by connecting the power cord to a 120V circuit (which may lead to self-starting at an inopportune time).
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 2.4
- Impact score
- 1.4
- Exploitability score
- 0.9
- Vector string
- CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Severity
- LOW
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nautilus:t618_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27C296BE-6276-45F8-97E6-DDA3D9FF18E7",
"versionEndExcluding": "2022-06-09"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nautilus:t618:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BC8DC73D-6B7F-48E7-9247-DA3B08A6A77A",
"versionEndIncluding": "100647pro21183960",
"versionStartIncluding": "100647pro21130111"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nautilus:t616_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99A7A83F-DA96-4CA5-B4CB-CFE2FF2CE1F4",
"versionEndExcluding": "2022-06-09"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nautilus:t616:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "93BBD527-872C-40A8-93B2-CE21F81C4B01",
"versionEndIncluding": "100672pro21171980",
"versionStartIncluding": "100672pro21140001"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]