PT-2021-4300 · Bluetrum · Bluetrum Ab5301A

Guang Gong + 1 · Published 2021-09-07 · Updated 2021-09-10 · CVE-2021-34150

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Bluetrum AB5301A (affected versions not specified)

Description The Bluetooth Classic implementation does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections via a crafted LMP packet. This can disable the AB5301A inquiry and page scan procedures. The issue is related to a buffer overflow in memory. To restore BT connectivity, the user needs to manually perform a power cycle (restart) of the device.

Recommendations For Bluetrum AB5301A devices, as a temporary workaround, consider restarting the device manually to restore BT connectivity after an attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2021-04909

CVE-2021-34150

Affected Products

Bluetrum Ab5301A

References · 6

• https://bdu.fstec.ru/vul/2021-04909 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-34150 · Security Note
• http://bluetrum.com/product/ab5301a.html · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2021090609 · Note
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf · Note
• https://t.me/cibsecurity/28327 · Telegram Post