CVE-2019-16924

CVE-2019-16924 describes a critical vulnerability in the Nulock application 1.5.0, where it transmits user passwords in cleartext over Bluetooth, affecting nuvending nulock products. This allows adjacent attackers to easily sniff network traffic and gain full control of the lock, posing a high risk to confidentiality, integrity, and availability due to its low attack complexity and lack of required user interaction. Despite its high CVSS score of 8.8, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.