Vulnerability Details CVE-2021-31785
The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. Manual user intervention is required to restart the device and restore Bluetooth communication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.1
References
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://launchstudio.bluetooth.com/ListingDetails/76427
- https://www.actions-semi.com/index.php?id=3581&siteId=4
Products affected by CVE-2021-31785
-
cpe:2.3:h:actions-semi:ats2815:-
-
cpe:2.3:h:actions-semi:ats2819:-
-
cpe:2.3:h:actions-semi:ats2819p:-
-
cpe:2.3:h:actions-semi:ats2819s:-
-
cpe:2.3:h:actions-semi:ats2819t:-
-
cpe:2.3:o:actions-semi:ats2815_firmware:-
-
cpe:2.3:o:actions-semi:ats2819_firmware:-
-
cpe:2.3:o:actions-semi:ats2819p_firmware:-
-
cpe:2.3:o:actions-semi:ats2819s_firmware:-
-
cpe:2.3:o:actions-semi:ats2819t_firmware:-