PT-2019-14489 · Texas Instruments · Wl18Xx-Bt-Sp+1

Published 2019-11-13 · Updated 2020-08-18 · CVE-2019-15948

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Texas Instruments CC256xC-BT-SP versions 1.2 Texas Instruments CC256xB-BT-SP version 1.8 Texas Instruments WL18xx-BT-SP version 4.4

Description The issue allows remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet when LE scan mode is used, potentially causing a denial of service or executing arbitrary code.

Recommendations For Texas Instruments CC256xC-BT-SP version 1.2, update the firmware to prevent the buffer overflow. For Texas Instruments CC256xB-BT-SP version 1.8, update the firmware to prevent the buffer overflow. For Texas Instruments WL18xx-BT-SP version 4.4, update the firmware to prevent the buffer overflow.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-15948

Affected Products

Cc256Xb-Bt-Sp

Wl18Xx-Bt-Sp

References · 8

• 🔥 https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/ti_wl18xx_adv_rce.py · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-15948 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15948 · Vendor Advisory
• https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs · Note
• https://e2e.ti.com/support/wireless-connectivity/bluetooth/f/538/t/856161 · Note
• https://t.me/cybersecuritytechnologies/1595 · Telegram Post
• https://youtube.com/watch?v=bk5lOxieqbA · Note
• https://linkedin.com/in/veronica-kovah-2587185 · Note