CVE-2024-40892 Firewalla BTLE Weak Credentials

A weak credential vulnerability exists in Firewalla Box Software versions before 1.979. This vulnerability allows a physically close attacker to use the license UUID for authentication and provision SSH credentials over the Bluetooth Low-Energy BTLE interface. Once an attacker gains access to the...

PT-2024-29132

Name of the Vulnerable Software and Affected Versions Firewalla Box Software versions before 1.979 Description Multiple authenticated operating system OS command injection vulnerabilities exist in the software. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE...

CVE-2024-40893: Improper Neutralization of Special Elements used in an OS Command

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...