Design/Logic Flaw

2018-09-1421:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.4%

JSON

oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.

CPENameOperatorVersion
obike-stationless_bike_sharingeq2.5.4

CPE	Name	Operator	Version
	obike-stationless_bike_sharing	eq	2.5.4

References

seclists.org/bugtraq/2018/Sep/30