CVE-2019-17520

Опубликовано: 10 фев. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 6.1

EPSS Низкий

Описание

The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on reception, allowing attackers in radio range to cause a denial of service (crash) via crafted packets.

Ссылки

http://www.ti.com/tool/LAUNCHXL-CC2640R2
Product
Vendor Advisory
https://asset-group.github.io/disclosures/sweyntooth/
Third Party Advisory
https://www.youtube.com/watch?v=Iw8sIBLWE_w
Exploit
Third Party Advisory
http://www.ti.com/tool/LAUNCHXL-CC2640R2
Product
Vendor Advisory
https://asset-group.github.io/disclosures/sweyntooth/
Third Party Advisory
https://www.youtube.com/watch?v=Iw8sIBLWE_w
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ti:cc2640r2_software_development_kit:*:*:*:*:*:*:*:*

Версия до 3.30.00.20 (включая)

cpe:2.3:h:ti:cc2640r2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00146

Низкий

6.5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-xr3c-8qvg-wf25

github

больше 3 лет назад