Lucene search

K
nvd[email protected]NVD:CVE-2021-35952
HistoryDec 26, 2022 - 6:15 a.m.

CVE-2021-35952

2022-12-2606:15:10
web.nvd.nist.gov
fastrack reflex 2.0
w307s_reflex_v90.89
activity tracker
remote attacker
bluetooth le characteristics
handle 0x0017
time change
date change
month change

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

49.3%

fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows a Remote attacker to change the time, date, and month via Bluetooth LE Characteristics on handle 0x0017.

Affected configurations

NVD
Node
fastrackreflex_2.0_firmwareMatch90.89
AND
fastrackreflex_2.0Match-

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

49.3%

Related for NVD:CVE-2021-35952