PT-2020-10082 · Texas Instruments · Ble-Stack+1

Published 2020-02-10 · Updated 2020-02-14 · CVE-2019-19193

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Texas Instruments SIMPLELINK-CC2640R2-SDK versions 3.30.00.20 and earlier Texas Instruments BLE-STACK versions 1.5.0 and earlier

Description The Bluetooth Low Energy peripheral implementation does not properly restrict the advertisement connection request packet on reception. This allows attackers in radio range to cause a denial of service via a crafted packet.

Recommendations For Texas Instruments SIMPLELINK-CC2640R2-SDK versions 3.30.00.20 and earlier, update to a version released after Q4 2019 to resolve the issue. For Texas Instruments BLE-STACK versions 1.5.0 and earlier, update to a version released after Q4 2019 to resolve the issue.

Fix

Related Identifiers

CVE-2019-19193

Affected Products

Ble-Stack

Simplelink-Cc2640R2-Sdk

References · 4

• https://osv.dev/vulnerability/CVE-2019-19193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19193 · Security Note
• http://ti.com/tool/BLE-STACK · Vendor Advisory
• https://asset-group.github.io/disclosures/sweyntooth · Note