2 matches found
Code injection
In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...
5.7CVSS5.7AI score0.00286EPSS
SaveExploits1References1
PT-2018-6584
Name of the Vulnerable Software and Affected Versions: Samsung Gear products affected versions not specified Description: The issue allows an attacker to update the Bluetooth link key in Samsung Gear products to match their own link key. This can be exploited without the user's knowledge if the...
5.7CVSS0.00286EPSS
SaveExploits1References2
20