medium5.7
CVE-2021-31611
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by…
Impact
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by a malformed LMP packet, allowing attackers in radio range to deadlock a device via a crafted LMP packet. The user needs to manually reboot the device to restore communication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zh-Jieli | Ac6901 Firmware | All versions |
| Zh-Jieli | Ac6925 Firmware | All versions |
| Zh-Jieli | Ac6926 Firmware | All versions |
| Zh-Jieli | Ac6928 Firmware | All versions |
| Zh-Jieli | Ac6921 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.zh-jieli.com/product/68-cn.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/19746
- https://launchstudio.bluetooth.com/ListingDetails/58628
- http://www.zh-jieli.com/product/68-cn.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/19746
- https://launchstudio.bluetooth.com/ListingDetails/58628