CVE-2020-13702

The CVE-2020-13702 entry concerns the Rolling Proximity Identifier used by the Apple/Google Exposure Notification API (beta through 2020-05-29). A secondary temporary UID enables attackers within Beacon/IoT networks to track an individual device’s movements via Bluetooth LE discovery, compromisin...

CVE-2020-13702: Exposure of Sensitive Information to an Unauthorized Actor

The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart Privacy because there is a secondary temporary UID. An attacker with access to Beacon or IoT networks can seamlessly track individual device...

PT-2020-13655

Name of the Vulnerable Software and Affected Versions Apple/Google Exposure Notification API beta through 2020-05-29 Description The issue enables attackers to circumvent Bluetooth Smart Privacy due to a secondary temporary UID in the Rolling Proximity Identifier. This allows an attacker with...

CVE-2020-11539

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

CVE-2020-11539

CVE-2020-11539 affects Tata Sonata Smart SF Rush v1.12. The connected sources describe a Bluetooth Low Energy security flaw where OTA data is unencrypted and there is no authentication/signature verification, allowing an attacker to influence device parameters. Root cause: lack of pairing securit...

CVE-2020-11539: Missing Authentication for Critical Function

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

PT-2020-12676

Name of the Vulnerable Software and Affected Versions Tata Sonata Smart SF Rush version 1.12 Description An issue has been identified where the smart band operates with no pairing, utilizing mode 0 Bluetooth LE security level. This results in unencrypted data transmission over the air. Furthermor...

[SECURITY] [DLA 1747-1] firmware-nonfree security update

Package : firmware-nonfree Version : 20161130-5deb8u1 CVE ID : CVE-2018-5383 Eli Biham and Lior Neumann discovered a cryptographic weakness in the Bluetooth LE SC pairing protocol, called the Fixed Coordinate Invalid Curve Attack CVE-2018-5383. Depending on the devices used, this could be exploit...

Debian DLA-1747-1 : firmware-nonfree security update

Eli Biham and Lior Neumann discovered a cryptographic weakness in the Bluetooth LE SC pairing protocol, called the Fixed Coordinate Invalid Curve Attack CVE-2018-5383. Depending on the devices used, this could be exploited by a nearby attacker to obtain sensitive information, for denial of servic...

I know where your pet is

Kaspersky Lab's many years of cyberthreat research would suggest that any device with access to the Internet will inevitably be hacked. In recent years, we have seen hacked toys, kettles, cameras, and irons. It would seem that no gadget has escaped the attention of hackers, yet there is one last...

Google Nest Cam 5.2.1
 - Buffer Overflow Conditions Over Bluetooth LE

Google Nest Cam 5.2.1 - Buffer Overflow Conditions Over Bluetooth LE Exploit Title: Google Nest Cam - Multiple Buffer Overflow Conditions Over Bluetooth LE Reported to Google: October 26, 2016 Public Disclosure: March 17, 2017 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage:...

Google Nest Cam 5.2.1
 - Buffer Overflow Conditions Over Bluetooth LE

Exploit for hardware platform in category dos / poc Exploit Title: Google Nest Cam - Multiple Buffer Overflow Conditions Over Bluetooth LE Reported to Google: October 26, 2016 Public Disclosure: March 17, 2017 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage: https://nest.com/ Affected:...

Google Nest Cam 5.2.1 Buffer Overflow

Exploit Title: Google Nest Cam - Multiple Buffer Overflow Conditions Over Bluetooth LE Reported to Google: October 26, 2016 a" Public Disclosure: March 17, 2017 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage: https://nest.com/ Affected: Dropcam, Dropcam Pro, Nest Cam Indoor/Outdoor...

Google Nest Cam 5.2.1
 - Buffer Overflow Conditions Over Bluetooth LE

Exploit Title: Google Nest Cam - Multiple Buffer Overflow Conditions Over Bluetooth LE Reported to Google: October 26, 2016 Public Disclosure: March 17, 2017 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage: https://nest.com/ Affected: Dropcam, Dropcam Pro, Nest Cam Indoor/Outdoor models ...