Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jg54-6p86-rp5q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.

EPSS

Процентиль: 28%
0.00101
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 4 лет назад

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.

CVSS3: 6.5
nvd
больше 4 лет назад

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.

CVSS3: 6.5
debian
больше 4 лет назад

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB do ...

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость реализации Bluetooth Classic микропрограммного обеспечения устройств CC256xCQFN-EM, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 28%
0.00101
Низкий