Vulnerability Details CVE-2019-17518
The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to link layer packets with a payload length larger than expected, allowing attackers in radio range to cause a buffer overflow via a crafted packet. This affects, for example, August Smart Lock.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.1
References
- https://asset-group.github.io/disclosures/sweyntooth/
- https://www.dialog-semiconductor.com/ja/products/connectivity/bluetooth-low-energy/smartbond-da14680-and-da14681
- https://asset-group.github.io/disclosures/sweyntooth/
- https://www.dialog-semiconductor.com/ja/products/connectivity/bluetooth-low-energy/smartbond-da14680-and-da14681
Products affected by CVE-2019-17518
-
cpe:2.3:a:dialog-semiconductor:software_development_kit:1.0.14.1081
-
cpe:2.3:h:dialog-semiconductor:da14680:-
-
cpe:2.3:h:dialog-semiconductor:da14681:-
-
cpe:2.3:h:dialog-semiconductor:da14682:-
-
cpe:2.3:h:dialog-semiconductor:da14683:-