CVE-2018-20957

HIGH

Tapplock one+ Firmware < 2018-06-12 - Replay Attack via BLE Subsystem

Title source: llm

The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.

Core 2

Core References

Vendor Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 8.8

EPSS 0.0098

EPSS Percentile 58.0%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-284

Status published

Products (1)

tapplock/one\+_firmware < 2018-06-12

Published Aug 08, 2019

Tracked Since Feb 18, 2026