PT-2023-31409 · Interaxon · Muse App+1

Published 2023-12-02 · Updated 2023-12-07 · CVE-2023-49914

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions InteraXon Muse 2 devices (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in an incorrect report of an outstanding, calm meditation state. This is achieved via a 480 MHz RF carrier that is modulated by a "false" brain wave, also known as a Brain-Hack attack. The Muse App does not display the reception of a strong RF carrier and fails to alert the user that a report may be misleading if this carrier has been modulated by a low-frequency signal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-49914

Affected Products

Interaxon Muse 2

Muse App

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-49914 · Security Note
• https://t.me/cvenotify/62784 · Telegram Post
• https://scholar.google.com/citations?view_op=view_citation&hl=en&user=8hu27apy8A4C&citation_for_view=8hu27apy8A4C:Se3iqnhoufwC · Note
• https://dl.acm.org/doi/10.1145/3605758.3623497 · Note
• https://t.me/cvenotify/61984 · Telegram Post