writeup-cve-2019-19194

Writeup CVE-2019-19194 This is a writeup and theoretical Proof-of-Concept of CVE-2019-19194. ⚠️ This CVE was found by https://asset-group.github.io/disclosures/sweyntooth/ Table of Content Summary Vulnerable software and version Overview Protocol Stack and Architecture Pairing Procedure Proof of...

crackle

crackleはBLE暗号化（別名Bluetooth Smart）をクラックします。 crackleはBLEペアリングプロセスの脆弱性を悪用し、攻撃者がTK（Temporary Key）を推測したり、非常に高速に総当たり攻撃することを可能にします。TKとペアリングプロセスで収集したその他のデータを用いて、STK（Short Term Key）、そして後にはLTK（Long Term Key）を取得できます。 STKとLTKがあれば、マスターとスレーブ間のすべての通信を復号できます。 crackleを使用する前に、FAQを確認して、状況に適したツールかどうかを判断してください。...

BLEBoy

BLEBoy 目标 创建一个支持所有 BLE 配对方式的 BLE 外设，可用于培训和测试，包括带外（OOB）配对。该外设必须是可配置的，并且易于使用消费级零件重新制作。 简介 BLEBoy 是一个使用 Adafruit nRF52 Feather 开发板实现的 BLE 外设，它已更新以支持蓝牙规范（https://www.bluetooth.com/specifications/bluetooth-core-specification）中描述的所有 BLE 配对方式。BLEBoy 允许即时更新 GAP 安全参数（LESC、OOB、MitM、IO...

CVE-2024-34722

In smpprocrand of smpact.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Authentication Bypass Vulnerability (CNVD-2024-33528)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an authentication bypass vulnerability that stems from an incorrect protocol implementation in the smpprocrand method of the smpact.cc file, which can be exploited by an attacker to potentially...

CVE-2024-34722

In smpprocrand of smpact.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34722

In smpprocrand of smpact.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34722

In smpprocrand of smpact.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-45190

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...

Cypress Semiconductor PSoC Creator BLE Security Feature Issue Vulnerability

Cypress Semiconductor PSoC Creator BLE is a programmable embedded system-on-chip with integrated Bluetooth Low Energy BLE from Cypress Semiconductor. A security signature issue vulnerability exists in Cypress Semiconductor PSoC Creator 4.2 BLE prior to version 3.64, which stems from the BLE...

A Secure “Smart” Kettle?

We haven’t looked at smart kettles for a long time, mostly as the UK market leader, Smarter, fixed their security with the iKettle 3.0. So I got quite excited when a colleague pointed out the Xiaomi ‘smart’ kettle a few weeks back. It’s the first kettle with a mobile app that we’ve seen for a...