CVE-2018-16242 - CERT CVE
ID CVE-2018-16242
Sažetak oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.
Reference
CVSS
Base: 2.9
Impact: 2.9
Exploitability:5.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL NONE
CVSS vektor AV:A/AC:M/Au:N/C:N/I:P/A:N
Zadnje važnije ažuriranje 03-10-2019 - 00:03
Objavljeno 14-09-2018 - 21:29