Lucene search

MitreCVE-2019-17060

HistoryFeb 10, 2020 - 9:51 p.m.

CVE-2019-17060

2020-02-1021:51:09

CWE-120

mitre

web.nvd.nist.gov

nxp kw41z

ble

stack

implementation

bluetooth low energy

ble link layer

vulnerability

cve-2019-17060

security

nvd

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

29.0%

JSON

The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID (LLID) equal to zero. This allows attackers within radio range to cause deadlocks, cause anomalous behavior in the BLE state machine, or trigger a buffer overflow via a crafted BLE Link Layer frame.

Affected configurations

Nvd

Node

nxpkw31zMatch-

nxpkw34Match-

nxpkw35Match-

nxpkw36Match-

nxpkw37Match-

nxpkw38Match-

nxpkw39Match-

nxpkw41zMatch-

AND

nxpmcuxpresso_software_development_kitRange≤2.2.1

VendorProductVersionCPE
nxpkw31z-cpe:2.3:h:nxp:kw31z:-:*:*:*:*:*:*:*
nxpkw34-cpe:2.3:h:nxp:kw34:-:*:*:*:*:*:*:*
nxpkw35-cpe:2.3:h:nxp:kw35:-:*:*:*:*:*:*:*
nxpkw36-cpe:2.3:h:nxp:kw36:-:*:*:*:*:*:*:*
nxpkw37-cpe:2.3:h:nxp:kw37:-:*:*:*:*:*:*:*
nxpkw38-cpe:2.3:h:nxp:kw38:-:*:*:*:*:*:*:*
nxpkw39-cpe:2.3:h:nxp:kw39:-:*:*:*:*:*:*:*
nxpkw41z-cpe:2.3:h:nxp:kw41z:-:*:*:*:*:*:*:*
nxpmcuxpresso_software_development_kit*cpe:2.3:a:nxp:mcuxpresso_software_development_kit:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nxp	kw31z	-	cpe:2.3:h:nxp:kw31z:-:::::::*
nxp	kw34	-	cpe:2.3:h:nxp:kw34:-:::::::*
nxp	kw35	-	cpe:2.3:h:nxp:kw35:-:::::::*
nxp	kw36	-	cpe:2.3:h:nxp:kw36:-:::::::*
nxp	kw37	-	cpe:2.3:h:nxp:kw37:-:::::::*
nxp	kw38	-	cpe:2.3:h:nxp:kw38:-:::::::*
nxp	kw39	-	cpe:2.3:h:nxp:kw39:-:::::::*
nxp	kw41z	-	cpe:2.3:h:nxp:kw41z:-:::::::*
nxp	mcuxpresso_software_development_kit	*	cpe:2.3:a:nxp:mcuxpresso_software_development_kit::::::::

References

asset-group.github.io/disclosures/sweyntooth/

www.nxp.com/products/wireless/bluetooth-low-energy:BLUETOOTH-LOW-ENERGY-BLE

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

29.0%

JSON

Related for CVE-2019-17060