medium6.5
CVE-2021-31785
The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets…
Impact
The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. Manual user intervention is required to restart the device and restore Bluetooth communication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Actions-Semi | Ats2819p Firmware | All versions |
| Actions-Semi | Ats2815 Firmware | All versions |
| Actions-Semi | Ats2819 Firmware | All versions |
| Actions-Semi | Ats2819s Firmware | All versions |
| Actions-Semi | Ats2819t Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4