Lucene search
HistoryDec 26, 2022 - 6:15 a.m.
CVE-2021-35951
cve-2021-35951
fastrack reflex 2.0 w307s_reflex
unauthenticated remote attacker
malicious firmware update
ble
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.9%
fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious firmware update via BLE and brick the device.
Affected configurations
Node
fastrackreflex_2.0Match-
fastrackreflex_2.0_firmwareMatch90.89
| CPE | Name | Operator | Version |
|---|---|---|---|
| fastrack:reflex_2.0_firmware | fastrack reflex 2.0 firmware | eq | 90.89 |
Related
cvelist
cvelist
CVE-2021-35951
2022-12-26 00:00:00
nvd
nvd
CVE-2021-35951
2022-12-26 06:15:09
prion
prion
Code injection
2022-12-26 06:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.9%
Related for CVE-2021-35951