medium5.3
CVE-2018-16242
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to r…
Impact
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| O.Bike | Smart Locker Firmware | All versions |
| O.Bike | Obike-Stationless Bike Sharing | Version 2.5.4 |