ASB-A-251514170

In smpprocrand of smpact.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-7391

CVE-2024-7391 describes a BLE-based information disclosure in ChargePoint Home Flex during the Wi‑Fi setup flow. An attacker connected over Bluetooth Low Energy during setup can obtain Wi‑Fi credentials, enabling access to the owner’s Wi‑Fi network. The flaw is reported to require user interactio...

PT-2024-10719 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds read in the l2cble process sig cmd function of l2c ble.cc due to a missing bounds check. This could lea...

PT-2024-33072 · Realtek · Realtek Rtl8762E Ble Sdk

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762E BLE SDK version 1.4.0 Description: The issue is related to the Bluetooth Low Energy implementation of the Realtek RTL8762E BLE SDK, which allows attackers to cause a Denial of Service DoS by supplying a crafted ll terminate i...

CVE-2024-48290

An issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows attackers to cause a Denial of Service DoS via supplying a crafted llterminateind packet...

MAL-2024-9330 Malicious code in alb-um-availa-ble-zip-mp3-file-46046-radical-connector-m2ydd-nirtvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04c7604df6d26c098c3985382dc30aada82e32d972c2f8222802ff998dc52ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9327 Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22fc68d2042156469205e75f4a654f8557c933212d8ff61b7068167cfd7b344f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9328 Malicious code in alb-um-availa-ble-zip-mp3-file-30506-i-feel-alright-898re-atdkuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 301aedb3c629f2045611e487e9d753ff50c0a6fc1da4ee93c01ab32ee0cff0a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9329 Malicious code in alb-um-availa-ble-zip-mp3-file-38068-its-all-about-to-change-rnonb-pzjjbh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4008f42b5bc2b6647cc2d9e297edb68f60da9ce6c5a20e62b44cb70616a8a6d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9331 Malicious code in alb-um-availa-ble-zip-mp3-file-85058-bright-phoebus-dboqy-oraqvx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7896431589d1851d65f8365d770dff71aa63f823917838fd5734b3ee77fe7f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6657

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device...

CVE-2024-6657 BLE peripheral DoS after few cycles of connect/disconnects

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device...

CVE-2024-6657 BLE peripheral DoS after few cycles of connect/disconnects

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device...

CVE-2024-6657

CVE-2024-6657 affects Siemens Sentron Powercenter 1000/1100 BLE subsystem. A denial-of-service can occur in a BLE network when multiple central devices repeatedly connect/disconnect to a peripheral, with recovery requiring a hard reset. The DoS is linked to synchronization errors in the BLE compo...

Silicon BLE 安全漏洞

Silicon BLE is a low-power Bluetooth program from Silicon Corporation, USA. A security vulnerability exists in Silicon BLE versions 7.1.1 and earlier and 8.0.0, which stems from a denial of service condition in a single BLE peripheral device in a network when multiple centralized devices are...

CVE-2024-46539

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

CVE-2024-46539

CVE-2024-46539 maps to insecure permissions in the BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3, enabling a nearby attacker to trigger a DoS due to BLE privilege issues. Root cause: insecure BLE permissions; impact: DoS with adjacent attack vector. A temporary workaround mentione...

CVE-2024-23958

Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations. Authentication is not requir...

CVE-2024-23959 Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations...

CVE-2024-23958 Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability

Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations. Authentication is not requir...