PT-2018-10715 · Rondaful · Rondaful M1 Wristband Smart Band

Publicado 2018-05-31 · Atualizado 2019-10-03 · CVE-2018-11631

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Rondaful M1 Wristband Smart Band version 1

Description The issue allows remote attackers to send an arbitrary number of call or SMS notifications via crafted Bluetooth Low Energy (BLE) traffic.

Recommendations For Rondaful M1 Wristband Smart Band version 1, as a temporary workaround, consider disabling Bluetooth connectivity until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2018-11631

Produtos afetados

Rondaful M1 Wristband Smart Band

Referências · 2

• 🔥❌ https://github.com/xMagass/bandexploit · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-11631 · Nota de Segurança