PT-2019-14680 · Swell · Swell Kit Mod

Published 2019-09-23 · Updated 2019-09-23 · CVE-2019-16518

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Swell Kit Mod devices (affected versions not specified)

Description An issue was discovered that allows an attacker to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy (BLE) packets. These packets can specify large power or voltage values, potentially causing harm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2019-16518

Affected Products

Swell Kit Mod

References · 3

• 🔥 https://gitlab.com/crypt0crc/cve-2019-16518 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-16518 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16518 · Vendor Advisory