The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 arises due to insufficient verification of input data. This allows a perpetrator to trigger a service failure.

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through the created LMP...

DEBIAN-CVE-2021-34145

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with an invalid Baseband packet type and LTADDRESS and LTADDR after completion of the LMP setup procedure, allowing attackers in radio range...

UBUNTU-CVE-2021-34146

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart crash of the device by flooding it with LMPAURand packets after the pagi...

CVE-2021-28139

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield...

CVE-2021-34146

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart crash of the device by flooding it with LMPAURand packets after the pagi...

CVE-2021-31609

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet...

CVE-2021-31613

The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of a truncated LMP packet during the LMP auto rate procedure, allowing attackers in radio range to immediately crash and restart a device via a crafted LMP packet...

Zhuhai Jieli AC690X输入验证错误漏洞

The Zhuhai Jieli AC690X is a Bluetooth chip. The Zhuhai Jieli AC690X suffers from an input validation error vulnerability that stems from the Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices failing to properly handle a garbled LMP setup program followed by a misformatte...

JBL TUNE500BT输入验证错误漏洞

The JBL TUNE500BT is a Bluetooth headset from harman. The JBL TUNE500BT suffers from an input validation error vulnerability that stems from the Bluetooth Classic implementation on the JBL TUNE500BT device failing to properly handle the reception of successive unsolicited LMP responses, allowing ...

Zhuhai Jieli AC690X输入验证错误漏洞

The Zhuhai Jieli AC690X is a Bluetooth chip. The Zhuhai Jieli AC690X suffers from an input validation error vulnerability that arises from the Bluetooth Classic implementation in the Zhuhai Jieli AC6366CDEMOV1.0 that does not correctly handle the reception of consecutively provided unsolicited LM...

Actions ATS2815输入验证错误漏洞

The Actions ATS2815 is a Bluetooth chip from Actions. The Actions ATS2815 suffers from an Input Authentication Error vulnerability that stems from the Bluetooth Classic implementation on the Actions ATS2815 and ATS2819 chipsets failing to correctly handle the receipt of LMPhostconnectionreq...

Texas Instruments CC256XCQFN-EM 安全漏洞

Texas Instruments CC256XCQFN-EM is a Bluetooth development tool from Texas Instruments USA. A security vulnerability exists in the Texas Instruments CC256XCQFN-EM, which stems from the Bluetooth on the chipset's inability to properly process and accept successive non-legitimate LMP responses that...

AB32VG1 安全漏洞

The AB32VG1 is a chip from ZTE Bluetooth. A security vulnerability exists in the AB32VG1, which stems from the Bluetooth Classic implementation on the AB32VG1 device not properly handling the reception of successive unsolicited LMP responses, allowing an attacker within radio range to trigger a...

Zhuhai Jieli AC690X 安全漏洞

The Zhuhai Jieli AC690X is a Bluetooth chip. A security vulnerability exists in the Zhuhai Jieli AC690X that arises from the Bluetooth Classic implementation on Zhuhai Jieli AC690X devices not properly handling the reception of very large LMP packets greater than 17 bytes during LMP auto-rate,...

Espressif ESP-IDF 代码注入漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China's Loxin Information Technology Espressif. A code injection vulnerability exists in the Espressif ESP-IDF that stems from the Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier versions not properly...

CVE-2021-24550

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

CVE-2021-24550

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

Sql injection

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

CVE-2021-24550 Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

CVE-2021-24550

CVE-2021-24550 affects the WordPress Broken Link Manager plugin (versions ≤ 0.6.5). The issue arises because the plugin does not sanitize, validate, or escape the url GET parameter before using it in a SQL statement when retrieving the URL to edit, causing an authenticated SQL injection. Root cau...