Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6539-6fh5-h34x

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet.

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet.

EPSS

Процентиль: 28%
0.00101
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 4 лет назад

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet.

CVSS3: 6.5
nvd
больше 4 лет назад

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet.

CVSS3: 6.5
debian
больше 4 лет назад

The Bluetooth Classic implementation in the Cypress WICED BT stack thr ...

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость реализации Bluetooth Classic стека Cypress WICED BT для устройств CYW20735B1, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 28%
0.00101
Низкий