6.5

CVE-2021-31609

EPSS 0.13%
Published 07.09.2021 07:15:06
Last modified 21.11.2024 06:05:59
Source cve@mitre.org
Teams watchlist Login
Open Login

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Silabs ≫ Iwrap Version <= 6.3.0

Silabs ≫ Wt32i-a Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.13%	0.29

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	3.3	6.5	2.9	AV:A/AC:L/Au:N/C:N/I:N/A:P

https://dl.packetstormsecurity.net/papers/general/braktooth.pdf

Third Party Advisory

Technical Description

https://www.silabs.com/wireless/bluetooth/bluegiga-classic-legacy-modules/device.wt32i-a

Vendor Advisory

Product

https://nvd.nist.gov/vuln/detail/CVE-2021-31609

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-31609

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-31609

EUVD