PT-2021-4301 · Actions · Actions Ats2815+1

Published 2021-09-07 · Updated 2022-05-03 · CVE-2021-31785

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Actions ATS2815 and ATS2819 chipsets (affected versions not specified)

Description The Bluetooth Classic implementation does not properly handle the reception of multiple LMP host connection req packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. This issue exists due to insufficient input validation in the Bluetooth Classic implementation. Manual user intervention is required to restart the device and restore Bluetooth communication.

Recommendations For Actions ATS2815 and ATS2819 chipsets, as a temporary workaround, consider disabling Bluetooth communication until a patch is available. Restrict access to the device when not in use to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Locking

RCE

Weakness Enumeration

CWE-667

CWE-20

Related Identifiers

BDU:2021-04910

CVE-2021-31785

Affected Products

Actions Ats2815

Actions Ats2819

References · 6

• https://actions-semi.com/index.php?id=3581&siteId=4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31785 · Security Note
• https://bdu.fstec.ru/vul/2021-04910 · Security Note
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf · Note
• https://launchstudio.bluetooth.com/ListingDetails/76427 · Note
• https://actions-semi.com/index.php?id=3581&siteId=4 · Note