CVE-2019-19195

Опубликовано: 10 фев. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 6.1

EPSS Низкий

Описание

The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict link-layer data length on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.

Ссылки

https://asset-group.github.io/disclosures/sweyntooth/
Third Party Advisory
https://www.microchip.com/wwwproducts/en/ATSAMB11
Product
Vendor Advisory
https://asset-group.github.io/disclosures/sweyntooth/
Third Party Advisory
https://www.microchip.com/wwwproducts/en/ATSAMB11
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microchip:atmsamb11_blusdk_smart:*:*:*:*:*:*:*:*

Версия до 6.2 (включая)

cpe:2.3:h:microchip:atsamb11:-:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00186

Низкий

6.5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-3f9c-q755-6pf7

github

больше 3 лет назад