Lucene search

MitreCVE-2021-31610

HistorySep 07, 2021 - 7:15 a.m.

CVE-2021-31610

2021-09-0707:15:06

mitre

web.nvd.nist.gov

cve-2021-31610

bluetooth

ab32vg1

denial of service

nvd

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

39.2%

JSON

The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (either restart or deadlock the device) by flooding a device with LMP_AU_rand data.

Affected configurations

Nvd

Node

mimi_true_wireless_earbuds_basic_2Match-

AND

mimi_true_wireless_earbuds_basic_2_firmwareMatch-

Node

bluetrumab5376tMatch-

AND

bluetrumab5376t_firmwareMatch-

Node

bluetrumbt8896aMatch-

AND

bluetrumbt8896a_firmwareMatch-

VendorProductVersionCPE
mimi_true_wireless_earbuds_basic_2-cpe:2.3:h:mi:mi_true_wireless_earbuds_basic_2:-:*:*:*:*:*:*:*
mimi_true_wireless_earbuds_basic_2_firmware-cpe:2.3:o:mi:mi_true_wireless_earbuds_basic_2_firmware:-:*:*:*:*:*:*:*
bluetrumab5376t-cpe:2.3:h:bluetrum:ab5376t:-:*:*:*:*:*:*:*
bluetrumab5376t_firmware-cpe:2.3:o:bluetrum:ab5376t_firmware:-:*:*:*:*:*:*:*
bluetrumbt8896a-cpe:2.3:h:bluetrum:bt8896a:-:*:*:*:*:*:*:*
bluetrumbt8896a_firmware-cpe:2.3:o:bluetrum:bt8896a_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mi	mi_true_wireless_earbuds_basic_2	-	cpe:2.3:h:mi:mi_true_wireless_earbuds_basic_2:-:::::::*
mi	mi_true_wireless_earbuds_basic_2_firmware	-	cpe:2.3:o:mi:mi_true_wireless_earbuds_basic_2_firmware:-:::::::*
bluetrum	ab5376t	-	cpe:2.3:h:bluetrum:ab5376t:-:::::::*
bluetrum	ab5376t_firmware	-	cpe:2.3:o:bluetrum:ab5376t_firmware:-:::::::*
bluetrum	bt8896a	-	cpe:2.3:h:bluetrum:bt8896a:-:::::::*
bluetrum	bt8896a_firmware	-	cpe:2.3:o:bluetrum:bt8896a_firmware:-:::::::*

References

www.bluetrum.com/product/ab5376t.html

www.bluetrum.com/product/bt8896a.html

dl.packetstormsecurity.net/papers/general/braktooth.pdf

www.mi.com/global/mi-true-wireless-earbuds-basic-2/

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

39.2%

JSON

Related for CVE-2021-31610