Lucene search

MitreCVE-2019-16518

HistorySep 23, 2019 - 3:15 p.m.

CVE-2019-16518

2019-09-2315:15:10

CWE-668

mitre

web.nvd.nist.gov

swell kit mod

vandy vape

cve-2019-16518

bluetooth low energy

vulnerability

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

24.2%

JSON

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim’s mouth and throat via Bluetooth Low Energy (BLE) packets that specify large power or voltage values.

Affected configurations

Nvd

Node

vandyvapeswell_kit_mod_firmwareMatch2.0.2

AND

vandyvapeswell_kit_modMatch-

VendorProductVersionCPE
vandyvapeswell_kit_mod_firmware2.0.2cpe:2.3:o:vandyvape:swell_kit_mod_firmware:2.0.2:*:*:*:*:*:*:*
vandyvapeswell_kit_mod-cpe:2.3:h:vandyvape:swell_kit_mod:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vandyvape	swell_kit_mod_firmware	2.0.2	cpe:2.3:o:vandyvape:swell_kit_mod_firmware:2.0.2:::::::*
vandyvape	swell_kit_mod	-	cpe:2.3:h:vandyvape:swell_kit_mod:-:::::::*

References

gitlab.com/crypt0crc/cve-2019-16518

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

24.2%

JSON

Related for CVE-2019-16518