CVE-2023-26979

Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to decrease or increase the intensity of the stimulator by hijacking the BLE communication...

CVE-2023-26979

Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to decrease or increase the intensity of the stimulator by hijacking the BLE communication...

PT-2023-20884 · Bluetens · Bluetensq

Name of the Vulnerable Software and Affected Versions: Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 Description: The issue allows attackers to perform Man-in-the-middle attacks in the BLE channel, enabling them to decrease or increase the intensity of the stimulator by...

CVE-2023-26979

CVE-2023-26979 concerns the Bluetens Electrostimulation Device BluetensQ app (version 4.3.15). The connected documents confirm a vulnerability in the BLE channel that enables a Man-in-the-Middle attack, allowing an attacker to hijack BLE communication and decrease or increase the stimulator’s int...

CVE-2023-26979: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to decrease or increase the intensity of the stimulator by hijacking the BLE communication...

CVE-2023-33383

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

CVE-2023-33383

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

Out-of-bounds

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

CVE-2023-33383

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

CVE-2023-33383

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

CVE-2023-33383

CVE-2023-33383 affects Shelly 4PM Pro four-channel smart switch, firmware version 0.11.0. The vulnerability is a BLE out-of-bounds read fault condition that can trigger a device reload. Multiple connected sources (Red Hat advisory, NVD entry, CVE listings, Exploit-DB page) corroborate an out-of-b...

CVE-2023-33383: Out-of-bounds Read

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

CVE-2023-34625

ShowMojo MojoBox Digital Lockbox 1.4 is vulnerable to Authentication Bypass. The implementation of the lock opening mechanism via Bluetooth Low Energy BLE is vulnerable to replay attacks. A malicious user is able to intercept BLE requests and replicate them to open the lock at any time...

CVE-2023-34625

CVE-2023-34625 affects ShowMojo MojoBox Digital Lockbox firmware 1.4. The BLE-based unlock mechanism is vulnerable to replay attacks, enabling authentication bypass: a network-adjacent attacker can intercept BLE requests to unlock, or an attacker with physical access can extract recent BLE messag...

CVE-2023-34761

An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter...

Authentication flaw

An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter...

CVE-2023-21188

In btmbleupdateinqresult of btmblegap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a possible out-of-bounds read due to a heap buffer overflow in btmblegap.cc's btmbleupdateinqresult, which could lead to a local information disclosure...

CVE-2023-34761

An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter...

CVE-2023-34761

CVE-2023-34761 describes an unauthenticated BLE proximity attack affecting the 7-Eleven LED Message Cup (and Hello Cup 1.3.1 for Android). An attacker in Bluetooth range can remotely connect and bypass the app’s client-side chat censorship filter. Affected components include the Hello Cup/LED Cup...