NetSight
medium6.5

CVE-2021-31612

The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes dur…

Impact

The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet.

Affected products

VendorProductAffected versions
Zh-JieliAc6901 Firmware
All versions
Zh-JieliAc690n Firmware
All versions
Zh-JieliAc692n Firmware
All versions
Zh-JieliAc6902 Firmware
All versions
Zh-JieliAc6903 Firmware
All versions
Zh-JieliAc6905 Firmware
All versions
Zh-JieliAc6904 Firmware
All versions
Zh-JieliAc6907 Firmware
All versions
Zh-JieliAc6908 Firmware
All versions
Zh-JieliAc6997 Firmware
All versions
Zh-JieliAc6998 Firmware
All versions
Zh-JieliAc6999 Firmware
All versions

References