NetSight
medium4.3

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay.

Impact

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor.

Affected products

VendorProductAffected versions
MaximawatchesMaxima Max Pro Power Firmware
Version 1.0_486a

References