Amp'ed RF BT-AP 111 Bluetooth access point lacks an authentication mechanism

Overview The Amp’ed RF BT-AP 111 Bluetooth Access Point exposes an HTTP-based administrative interface without authentication controls. This allows an unauthenticated remote attacker to gain full administrative access to the device. Description The Amp’ed RF BT-AP 111 is a Bluetooth-to-Ethernet...

MOKOSmart MKGW1 BLE Gateway Security Vulnerability

MOKOSmart MKGW1 BLE Gateway is a smart device from China's MOKOSmart that enables seamless connectivity and data management for Bluetooth devices via the IoT cloud platform. A security vulnerability exists in MOKOSmart MKGW1 BLE Gateway v.1.1.1 and earlier versions, which originates from a...

The vulnerability of the corporate Bluetooth gateway Cassia X1000 allows a intruder to execute arbitrary code.

The vulnerability of the corporate Bluetooth gateway Cassia X1000 is related to the lack of measures taken to secure data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges using the queueUrl parameter in /bypass/conf...