medium6.5
CVE-2021-31613
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of a truncated LMP packet during the LMP …
Impact
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of a truncated LMP packet during the LMP auto rate procedure, allowing attackers in radio range to immediately crash (and restart) a device via a crafted LMP packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zh-Jieli | Ac6901 Firmware | All versions |
| Zh-Jieli | Ac6925 Firmware | All versions |
| Zh-Jieli | Ac6926 Firmware | All versions |
| Zh-Jieli | Ac6928 Firmware | All versions |
| Zh-Jieli | Ac6921 Firmware | All versions |
References
- NVD record
- CVE.org record
- http://www.zh-jieli.com/product/68-cn.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/19746
- https://launchstudio.bluetooth.com/ListingDetails/58628
- http://www.zh-jieli.com/product/68-cn.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/19746
- https://launchstudio.bluetooth.com/ListingDetails/58628