PT-2024-25201 · Unknown · Bluetooth Low Energy

Xiaobye-Ctf · Published 2024-07-03 · Updated 2024-07-05 · CVE-2024-3332

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bluetooth Low Energy (BLE) devices (affected versions not specified)

Description A malicious BLE device can send a specific order of packet sequence to cause a Denial of Service (DoS) attack on the victim BLE device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2024-3332

GHSA-JMR9-XW2V-5VF4

Affected Products

Bluetooth Low Energy

References · 4

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jmr9-xw2v-5vf4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3332 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3332 · Vendor Advisory
• https://twitter.com/CVEnew/status/1808549531434278956 · Twitter Post