What’s Vulnerable › Vulnerabilities
CVE-2018-16242
- Severity: medium (CVSS 5.3 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-09-14 · updated 2026-06-17
- Weakness: CWE-294
Description
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.
Affected products
- O.Bike Obike-Stationless Bike Sharing: 2.5.4
- O.Bike Smart Locker Firmware: all versions
References
Get alerted when CVE-2018-16242 or the next vulnerability affects your stack