cvedb.io
CVE-2018-16242
MEDIUM · CVSS 5.3
EPSS exploitation probability: 0%
Published 2018-09-14T21:29:03.817 · Last modified 2026-06-17T01:43:57.320

Summary

oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.

Affected products

o.bike — smart_locker_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when o.bike ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.