Design/Logic Flaw

2019-08-0713:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

JSON

The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device.

CPENameOperatorVersion
tapplock_firmwareeq< 2018612

CPE	Name	Operator	Version
	tapplock_firmware	eq	< 2018612

References

tapplock.com/notice/20180612/

www.pentestpartners.com/security-blog/totally-pwning-the-tapplock-smart-lock/