René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

428 lines
11 KiB
JSON

{
"id": "CVE-2021-31612",
"sourceIdentifier": "cve@mitre.org",
"published": "2021-09-07T07:15:07.093",
"lastModified": "2021-09-15T00:02:27.800",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet."
},
{
"lang": "es",
"value": "Una implementaci\u00f3n de Bluetooth Classic en los dispositivos Zhuhai Jieli AC690X, no maneja apropiadamente la recepci\u00f3n de un paquete LMP de gran tama\u00f1o, superior a 17 bytes, durante el procedimiento de auto calificaci\u00f3n de LMP, permitiendo a atacantes en el rango de radio desencadenar un bloqueo por medio de un paquete LMP dise\u00f1ado"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
"accessVector": "ADJACENT_NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.1
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.5,
"impactScore": 6.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6901_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A68BB39A-4A9C-4B57-9D29-12601FCFC763"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6901:-:*:*:*:*:*:*:*",
"matchCriteriaId": "06EBB244-F958-45C8-84B5-DFB3BA3E9449"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac690n_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "78A24F18-DFE9-44B7-990A-D15F7440DB91"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac690n:-:*:*:*:*:*:*:*",
"matchCriteriaId": "737F0352-0A9E-4242-B595-78C47C6655D7"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac692n_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "00D94121-902F-4C9A-8BE8-D7B1A9910955"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac692n:-:*:*:*:*:*:*:*",
"matchCriteriaId": "20A1E4AC-5F0C-4FBD-99ED-1EE81AC44A67"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6902_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4DA40F06-EAA2-4DD5-B223-F8A024611B93"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6902:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9EED7E82-F385-4BF4-92C3-F1D87D4B27A0"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6903_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DA6F3C19-43E8-4917-B8D2-FE7D9DB06DB9"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6903:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB8D175B-C001-4978-822E-6F50BB0EC85E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6905_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4A3465E0-3ABB-4F92-B1E2-177324FAAE92"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6905:-:*:*:*:*:*:*:*",
"matchCriteriaId": "08FB9CC5-15DF-485B-9D21-352E5262ADCA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6904_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "64C5116C-D942-4308-B203-316B44FBE4A8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6904:-:*:*:*:*:*:*:*",
"matchCriteriaId": "75974822-5B9D-4A62-8064-3256F512A759"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6907_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6F7FA9D5-7998-408E-B1C6-EBB001854296"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6907:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B6F32791-2597-4EB8-B456-3E7BAD998EAF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6908_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "211932B6-F00D-4D7B-A168-7EA747CCB921"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6908:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E5D7C217-4F8D-46F9-AA17-BE8C53A7EEF4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6997_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "20483D02-4362-4BB9-8563-EA8AC058A4CD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6997:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5AA70E93-3D24-4898-B480-280957F5AB80"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6998_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "434115EC-714C-4110-B1F7-244920D39333"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6998:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4194126F-3D60-4C32-A5BF-C3189DC8DA23"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:zh-jieli:ac6999_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6DE5F1B-14FB-4FD8-8371-8E12E663E4F8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:zh-jieli:ac6999:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76BB702E-A868-460D-BE2C-007B595A98EE"
}
]
}
]
}
],
"references": [
{
"url": "http://www.zh-jieli.com/product/68-cn.html",
"source": "cve@mitre.org",
"tags": [
"Product",
"Vendor Advisory"
]
},
{
"url": "https://dl.packetstormsecurity.net/papers/general/braktooth.pdf",
"source": "cve@mitre.org",
"tags": [
"Broken Link"
]
},
{
"url": "https://launchstudio.bluetooth.com/ListingDetails/19746",
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
]
}
]
}