35 matches found
CVE-2021-28155
The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data...
Design/Logic Flaw
The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data...
CVE-2021-28155
The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data...
CVE-2021-28155
The CVE-2021-28155 issue affects the JBL TUNE500BT Bluetooth Classic implementation. The vulnerability arises from mishandling of continuous unsolicited LMP responses, enabling attackers in radio range to trigger a denial of service by flooding the target with LMP Feature Response data, which can...
JBL TUNE500BT输入验证错误漏洞
The JBL TUNE500BT is a Bluetooth headset from harman. The JBL TUNE500BT suffers from an input validation error vulnerability that stems from the Bluetooth Classic implementation on the JBL TUNE500BT device failing to properly handle the reception of successive unsolicited LMP responses, allowing ...
CVE-2021-38548
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a...
CVE-2021-38548
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a...
CVE-2021-38548
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a...
Code injection
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a...
CVE-2021-38548
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a...
CVE-2021-38548
CVE-2021-38548 affects JBL Go 2 devices up to 2021-08-09. A remote attacker can recover spoken audio by analyzing measurements from an electro-optical sensor aimed at the device’s power-indicator LED, which is directly tied to the power line; the LED brightness mirrors power use, which varies wit...
support.jbl.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1156102 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
jbl-tw.com XSS vulnerability
Open Bug Bounty ID: OBB-718536 Description| Value ---|--- Affected Website:| jbl-tw.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
My JBL Headphones - Certificates or keys found, Customized SSL, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application My JBL Headphones published at the 'play' market has multiple vulnerabilities...
jbl.com XSS vulnerability
Vulnerable URL: http://www.jbl.com/search?cgid=';alertOPENBUGBOUNTY;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19908 VIP website status:| Yes Check jbl.com SSL connection:|...