CVE-2020-11539

CVE-2020-11539: Tata Sonata 스마트밴드의 부적절한 접근 제어 정보 설명: 스마트 밴드에 페어링 기능이 없으며 모드 0 BLE 보안 수준, 공기 중에 전송되는 데이터가 암호화되지 않는 것으로 확인되었습니다. 게다가 스마트 밴드로 전송되는 데이터에는 인증이나 서명 검증이 없기 때문에, 공격자가 스마트 장치의 매개변수를 제어할 수 있습니다. 영향을 받는 버전: Smart SF Rush - 1.12 연구자: Sayli Ambure https://twitter.com/sayliambure MITRE CVE 링크:...

CVE-2020-11539

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

Authentication flaw

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

CVE-2020-11539

CVE-2020-11539 affects Tata Sonata Smart SF Rush v1.12. The connected sources describe a Bluetooth Low Energy security flaw where OTA data is unencrypted and there is no authentication/signature verification, allowing an attacker to influence device parameters. Root cause: lack of pairing securit...