CVE-2020-10876

The CVE concerns the OKLOK mobile companion app (version 3.1.1) for Fingerprint Bluetooth Padlock FB50 (2.3). Root cause: timeout not implemented and verification attempt limits are not properly enforced on the four-digit code used to reset passwords. Impact: attacker can brute‑force the code to ...

CVE-2020-10876

The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 does not correctly implement its timeout on the four-digit verification code that is required for resetting passwords, nor does it properly restrict excessive verification attempts. This allows an attacker to brute...

Shenzhen Dragon Brothers Digital Lock Co., Ltd. OKLOK intelligent door locks have logical design loopholes

Shenzhen Dragon Brothers Digital Lock Co. Shenzhen Dragon Brothers Digital Lock Co. OKLOK smart door lock has a logical design vulnerability. Attackers can use the vulnerability to overstep the right to view the binding information of others, access to sensitive information, but also to perform...