obike

oBike Protocol Description BLE/HTTP This document provides an analysis of the oBike communication protocols as of January 2018. Results have been presented at the insomni'hack security conference 2019: slides recording as well as at the AREA41 security conference 2018: slides recording General...

CVE-2019-19193

CVE-2019-19193 affects TI Bluetooth Low Energy peripheral in SIMPLELINK-CC2640R2-SDK (up to 3.30.00.20) and BLE-STACK (up to 1.5.0) for CC2640R2 and CC2540/1. The issue is that the advertisement connection request packet is not properly restricted on reception, allowing attackers in radio range t...

oBike Electronic Lock Bypass

CVE-2018-16242 - oBike Electronic Lock Bypass Product: oBike bicycle-sharing service Vendor: oBike Inc. CVE ID: CVE-2018-16242 Subject: Access control bypass by replay attack on predictable nonce Effect: Unauthorized unlocking of bikes, cirumventing the ride-fees Author: Antoine Neuenschwander...