PT-2019-10060 · Opensynergy · Opensynergy Blue Sdk

Publicado 2019-03-29 · Atualizado 2019-04-01 · CVE-2018-20378

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: OpenSynergy Blue SDK versions 3.2 through 6.0

Description: The issue allows remote, unauthenticated attackers to execute arbitrary code or cause a denial of service via malicious L2CAP configuration requests, in conjunction with crafted SDP communication over maliciously configured L2CAP channels. The attacker must have connectivity over the Bluetooth physical layer and be able to send raw L2CAP frames. This is related to L2Cap HandleConfigReq in core/stack/l2cap/l2cap sm.c and SdpServHandleServiceSearchAttribReq in core/stack/sdp/sdpserv.c.

Recommendations: For OpenSynergy Blue SDK versions 3.2 through 6.0, consider disabling the L2Cap HandleConfigReq function and restricting access to the SdpServHandleServiceSearchAttribReq function until a patch is available. Additionally, restrict the ability to send raw L2CAP frames and limit connectivity over the Bluetooth physical layer to trusted devices.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-20378

Produtos afetados

Opensynergy Blue Sdk

Referências · 4

• 🔥 https://cymotive.com/wp-content/uploads/2019/03/Hell2CAP-0day.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-20378 · Nota de Segurança
• https://opensynergy.com/news/security/bluesdk-advisory2018003 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-20378 · Aviso do Fabricante