CVE-2024-34463: Improper Authorization

BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. The packet data also lacks authentication and integrity protection...

CVE-2024-34463

The BPL Personal Weighing Scale PWS-01BT (all versions) and the Be Well Android Application (versions 3.64 and prior) are vulnerable to the cleartext transmission of sensitive information. The root cause is that the devices send data in unencrypted BLE packets that lack both authentication and in...