CVE-2018-20957: Tapplock One+ Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.

Affected products

• Tapplock One+ Firmware: before 2018-06-12 (fixed in 2018-06-12)

Published 2019-08-08. Last modified 2026-06-17.