CVE-2024-3077 Bluetooth: integer underflow in gatt_find_info_rsp

An malicious BLE device can crash BLE victim device by sending malformed gatt packet...

CVE-2024-3077

CVE-2024-3077 concerns Zephyr RTOS Bluetooth BLE: a vulnerability in GATT handling that can cause a victim BLE device to crash when receiving malformed GATT packets. The CVE description points to an integer underflow in gatt_find_info_rsp as the underlying issue. Affected software is Zephyr RTOS ...

CVE-2024-3077

An malicious BLE device can crash BLE victim device by sending malformed gatt packet...

CVE-2024-3077: Buffer Over-read

An malicious BLE device can crash BLE victim device by sending malformed gatt packet...

PT-2024-23613 · Unknown · Zephyr Rtos

Name of the Vulnerable Software and Affected Versions: Zephyr RTOS versions prior to 3.6 Description: The issue allows a malicious BLE device to crash a BLE victim device by sending a malformed gatt packet. This can be exploited for local attacks. Network segmentation can help mitigate the risk...

Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated) Vulnerability

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Exploit Author: Alok kumar email protected, Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware Version: v1.0 486A Tested...

Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Date: 13-Nov-2023 Exploit Author: Alok kumar [email protected], Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware...

CVE-2023-46447

The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE...

CVE-2023-46447

The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE...

Code injection

The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE...

CVE-2023-46447

Summary : CVE-2023-46447 concerns the POPS! Rebel Android app (v5.0) and its Bluetooth Low Energy (BLE) transmission in the POPS! Rebel Glucose Monitoring System. The vulnerability is that glucose measurements are sent unencrypted over BLE, allowing potential eavesdropping of sensitive data. What...

CVE-2023-46447: Cleartext Transmission of Sensitive Information

The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE...

CVE-2023-51059

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface...

CVE-2023-51059: Undefined Security Weakness

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface...

CVE-2023-51059

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface...

CVE-2023-51059

CVE-2023-51059 affects MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway, ≤ v1.1.1. The issue is in the session management of the administrative web interface, enabling remote privilege escalation. Connected sources consistently describe the vulnerability in the gateway’s web admin session handling...

CVE-2023-51059

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface...

PT-2024-14040

Name of the Vulnerable Software and Affected Versions MOKOSmart MKGW1 BLE Gateway versions 1.1.1 and before Description An issue in the session management component of the administrative web interface allows a remote attacker to escalate privileges. Recommendations For versions 1.1.1 and before,...

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...