EUVD-2018-13495

Malware in sbrugna...

EUVD-2018-13496

Malware in sbrugna...

CVE-2018-20957

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

CVE-2018-20958

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device...

'Unbreakable' Smart Lock Draws FTC Ire for Deceptive Security Claims

The Federal Trade Commission has slapped Tapplock, the maker of smart padlocks that it bills as “unbreakable,” with an official complaint that could lead to fines down the road. The agency alleges that the company engaged in false and deceptive claims about its security practices, after the lock...

CVE-2018-20957

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

CVE-2018-20957

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

Design/Logic Flaw

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

CVE-2018-20957

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

CVE-2018-20957

CVE-2018-20957 affects Tapplock devices, where the Bluetooth Low Energy (BLE) subsystem before 2018-06-12 is vulnerable to replay attacks. The issue, described across multiple sources (NVD entry and related advisories), indicates an access-control/authentication weakness in the BLE bridge enablin...

Tapplock Bluetooth Low Energy Subsystem Access Control Error Vulnerability

Tapplock is a smart lock.Bluetooth Low Energy BLE subsystem is one of the low power Bluetooth subsystems. An access control error vulnerability exists in the BLE subsystem in versions of Tapplock prior to 2018-06-12, which can be exploited by an attacker to perform a replay attack...

PT-2019-10393

Name of the Vulnerable Software and Affected Versions Tapplock devices versions prior to 2018-06-12 Description The issue concerns the Bluetooth Low Energy BLE subsystem, which allows replay attacks. Recommendations For versions prior to 2018-06-12, update to a version released after 2018-06-12 t...

CVE-2018-20957: Improper Access Control

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...

CVE-2018-20958

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device...

CVE-2018-20958

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device...

Design/Logic Flaw

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device...

CVE-2018-20958

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device...

CVE-2018-20958

Tapplock’s BLE unlock mechanism before 2018-06-12 relies on Key1 and SerialNo, which are derived from the device’s MAC address that is broadcast publicly. This weak linkage means that credential material used for unlocks is effectively tied to observable hardware identifiers. The Red Hat entry an...

CVE-2018-20958: Exposure of Sensitive Information to an Unauthorized Actor

The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device...

PT-2019-10394

Name of the Vulnerable Software and Affected Versions Tapplock devices versions prior to 2018-06-12 Description The issue concerns the Bluetooth Low Energy BLE subsystem, which relies on Key1 and SerialNo for unlock operations. However, these are derived from the MAC address, which is broadcasted...