medium6.5
CVE-2018-20958
The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived fr…
Impact
The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tapplock | Tapplock Firmware | before 2018-06-12 |