PT-2021-19506 · Actions · Actions Ats2815

Published 2021-11-30 · Updated 2021-12-03 · CVE-2021-31787

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Actions ATS2815 chipsets (affected versions not specified)

Description The Bluetooth Classic implementation does not properly handle the reception of continuous unsolicited LMP responses. This allows attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP features res packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2021-31787

Affected Products

Actions Ats2815

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-31787 · Security Note
• https://actions-semi.com/index.php?id=3581&siteId=4 · Vendor Advisory
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf · Note
• https://t.me/cibsecurity/33130 · Telegram Post
• https://launchstudio.bluetooth.com/ListingDetails/76427 · Note