medium6.5
CVE-2021-31786
The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAdd…
Impact
The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forged BDAddress that matches the original connected host.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Actions-Semi | Ats2819p Firmware | All versions |
| Actions-Semi | Ats2815 Firmware | All versions |
| Actions-Semi | Ats2819 Firmware | All versions |
| Actions-Semi | Ats2819s Firmware | All versions |
| Actions-Semi | Ats2819t Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4