1. Home
  2. CVE Database
  3. CVE-2018-16242
MEDIUM · 5.3

CVE-2018-16242

oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable n...

Vulnerability Description

oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
O.BikeSmart Locker Firmware-
O.BikeSmart Locker-
O.BikeObike-Stationless Bike Sharing2.5.4

Related Weaknesses (CWE)

CWE-294

References

FAQ

What is CVE-2018-16242?

CVE-2018-16242 is a vulnerability with a CVSS score of 5.3 (MEDIUM). oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable n...

How severe is CVE-2018-16242?

CVE-2018-16242 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-16242?

Check the references section above for vendor advisories and patch information. Affected products include: O.Bike Smart Locker Firmware, O.Bike Smart Locker, O.Bike Obike-Stationless Bike Sharing.