medium6.5
CVE-2021-31787
The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attac…
Impact
The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP_features_res packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Actions-Semi | Ats2819p Firmware | All versions |
| Actions-Semi | Ats2815 Firmware | All versions |
| Actions-Semi | Ats2819 Firmware | All versions |
| Actions-Semi | Ats2819s Firmware | All versions |
| Actions-Semi | Ats2819t Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4