776 matches found
CVE-2022-37709: Authentication Bypass by Spoofing
Tesla Model 3 V11.02022.4.5.1 6b701552d7a6 Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging...
Fedora: Security Advisory for bettercap (FEDORA-2022-5ef0bd9a27)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: bettercap-2.32.0-5.fc36
The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks...
Fedora: Security Advisory for bettercap (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: bettercap-2.32.0-4.fc36
The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks...
CVE-2022-24893
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK "ESP-BLE-MESH", a memory corruption vulnerability can be triggered during provisioning, because there is no check for the "SegN" field of the Transaction Start PDU. This can result in memory...
PT-2022-16964
Name of the Vulnerable Software and Affected Versions ESP-IDF versions 4.1 through 4.4 Description A memory corruption issue can be triggered in the ESP-BLE-MESH component during provisioning due to the lack of a check for the SegN field of the Transaction Start PDU. This can lead to memory...
CVE-2022-24893: Out-of-bounds Write
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...
Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones
A new research undertaken by a group of academics from the University of California San Diego has revealed for the first time that Bluetooth signals can be fingerprinted to track smartphones and therefore, individuals. The identification, at its core, hinges on imperfections in the Bluetooth...
[SECURITY] Fedora 36 Update: bettercap-2.28-9.fc36
The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks...
[SECURITY] Fedora 34 Update: bettercap-2.28-9.fc34
The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks...
[SECURITY] Fedora 35 Update: bettercap-2.28-9.fc35
The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks...
CVE-2020-27373
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE...
Command injection
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE...
CVE-2020-27373
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE...
CVE-2020-27373
CVE-2020-27373 affects the Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1. The root cause is vulnerability to plain text commands over BLE, enabling OS command injection. Documented impacts indicate high severity, but the connected sources do not provide a concrete remediation or pat...
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 OS Command Injection Vulnerability
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to an operating system command injection vulnerability. The vulnerability stems from a vulnerability to pla...
CVE-2020-27373: Improper Neutralization of Special Elements used in an OS Command
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE...