CVE-2018-16242

Опубликовано: 14 сент. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 2.9

EPSS Низкий

Описание

oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.

Ссылки

https://seclists.org/bugtraq/2018/Sep/30
Exploit
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2018/Sep/30
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:o.bike:smart_locker_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:o.bike:smart_locker:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:o.bike:obike-stationless_bike_sharing:2.5.4:*:*:*:*:android:*:*

EPSS

Процентиль: 21%

0.00069

Низкий

5.3 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-294

Связанные уязвимости

GHSA-2vpv-3c94-j6hf