776 matches found
CVE-2022-32505
An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4...
CVE-2022-32507
An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts, could also be called from unprivileged accounts. This demonstrates that no access controls were implemented for the different BLE commands...
CVE-2022-32505: Uncontrolled Resource Consumption
An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4...
CVE-2022-32507: Improper Access Control
An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts, could also be called from unprivileged accounts. This demonstrates that no access controls were implemented for the different BLE commands...
CVE-2022-32505
A vulnerability exists in Nuki Home Solutions devices due to uncontrolled resource consumption . An attacker can send multiple malformed BLE packets to block specific device functionalities and trigger a reboot . This affects Nuki Smart Lock 3.0 (prior to 3.3.5), Nuki Smart Lock 2.0 (prior to 2.1...
CVE-2022-32505
An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4...
CVE-2022-32505
An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4...
CVE-2022-32507
An improper access control vulnerability exists in certain Nuki Home Solutions devices, specifically affecting Nuki Smart Lock 3.0 (versions before 3.3.5) and Nuki Smart Lock 2.0 (versions before 2.12.4). The root cause is a lack of access controls for BLE commands , which allows unprivileged acc...
CVE-2022-32507
An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts, could also be called from unprivileged accounts. This demonstrates that no access controls were implemented for the different BLE commands...
Siemens Scalance W1750D Uncontrolled Resource Consumption (CVE-2023-45622)
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point. This plugin only works with Tenable.ot. Plea...
Buffer Over-read
libzephyr.so is vulnerable to Buffer Over-read. The vulnerability is due to a flaw in the handling of malformed GATT packets by the BLE victim device when communicating with a malicious BLE device. This flaw allows the malicious BLE device to crash the victim device...
CVE-2024-3077
An malicious BLE device can crash BLE victim device by sending malformed gatt packet...
CVE-2024-3077
CVE-2024-3077 concerns Zephyr RTOS Bluetooth BLE: a vulnerability in GATT handling that can cause a victim BLE device to crash when receiving malformed GATT packets. The CVE description points to an integer underflow in gatt_find_info_rsp as the underlying issue. Affected software is Zephyr RTOS ...
CVE-2024-3077 Bluetooth: integer underflow in gatt_find_info_rsp
An malicious BLE device can crash BLE victim device by sending malformed gatt packet...
CVE-2024-3077
An malicious BLE device can crash BLE victim device by sending malformed gatt packet...
CVE-2024-3077: Buffer Over-read
An malicious BLE device can crash BLE victim device by sending malformed gatt packet...
PT-2024-23613 · Unknown · Zephyr Rtos
Name of the Vulnerable Software and Affected Versions: Zephyr RTOS versions prior to 3.6 Description: The issue allows a malicious BLE device to crash a BLE victim device by sending a malformed gatt packet. This can be exploited for local attacks. Network segmentation can help mitigate the risk...
Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated) Vulnerability
Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Exploit Author: Alok kumar email protected, Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware Version: v1.0 486A Tested...
Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)
Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Date: 13-Nov-2023 Exploit Author: Alok kumar [email protected], Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware...