CVE-2020-11539

CVE-2020-11539: Tata Sonata Smartband における不適切なアクセス制御 情報 説明: スマートバンドにはペアリングがなく（BLE セキュリティレベル モード 0）、無線で送信されるデータは暗号化されていないことが確認されています。さらに、スマートバンドに送信されるデータには認証や署名検証がないため、攻撃者なら誰でもスマートデバイスのパラメータを制御できてしまいます。 影響を受けるバージョン: Smart SF Rush - 1.12 研究者: Sayli Ambure https://twitter.com/sayliambure MITRE CVE...

EUVD-2020-3890

Malware in sbrugna...

Tata Sonata Smart SF Rush Data Forgery Issue Vulnerability

Tata Sonata Smart SF Rush is a smart bracelet product from Tata India. The product supports features like calorie counting and sleep tracking. A security vulnerability exists in Tata Sonata Smart SF Rush version 1.12, which originates from an unencrypted over-the-air transmission and fails to...

CVE-2020-11539

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

Authentication flaw

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

CVE-2020-11539

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

CVE-2020-11539

CVE-2020-11539 affects Tata Sonata Smart SF Rush v1.12. The connected sources describe a Bluetooth Low Energy security flaw where OTA data is unencrypted and there is no authentication/signature verification, allowing an attacker to influence device parameters. Root cause: lack of pairing securit...