CVE-2024-2104

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

CVE-2024-2104 JBL: Improper BLE security configurations and lack of authentication on the device's GATT server

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

EUVD-2024-27068

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

CVE-2024-2104

CVE-2024-2104 describes an improper BLE security configuration on a device GATT server that enables an adjacent, unauthenticated attacker to read and write device control commands via the mobile app service, potentially rendering the device unusable. Multiple connected sources (including JBL/CVE ...

JBL LIVE PRO 2 TWS 访问控制错误漏洞

The JBL LIVE PRO 2 TWS is a wireless noise-canceling headset from JBL USA. An access control error vulnerability exists in the JBL LIVE PRO 2 TWS, which stems from a BLE security misconfiguration that could allow a neighboring unauthenticated attacker to read or write device control commands...

DEBIAN-CVE-2022-50215

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Allow waiting for commands to complete on removed device When a SCSI device is removed while in active use, currently sg will immediately return -ENODEV on any attempt to wait for active commands that were sent before t...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (2021:2322)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2322-1 advisory. - QEMU: ide: atapi: OOB access while processing read commands CVE-2020-29443 Note that Nessus has not tested for this issue but has instead relied only on...